X-Ways Forensics

WinHex is in its core a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards.

WinHex
 

X-Ways Forensics is an advanced work environment for computer forensic examiners.
Runs under Windows 98/Me/2000/XP/2003 (full functionality supported only on Windows 2000/XP/2003). It is closely integrated with the WinHex hex and disk editor and can be purchased as a forensic license for WinHex.

 

Specialized computer forensics tool for the evidence collection phase of a forensic investigation which captures Windows and Linux live systems. X-Ways Capture gathers all data from the running computer e.g. on an external USB hard disk, such that during the analysis even encrypted or otherwise protected data can be examined that was unlocked at the point of time when the system was acquired. X-Ways Capture saves you from returning empty-handed after pulling the plug and imaging hard disks the conventional way when you discover that the relevant files are encrypted! Plus you may be able to find passwords in main memory that X-Ways Capture dumps for you.

 

Software for lawyers, law firms, corporate law and IT security departments, licensed investigators, and law enforcement agencies. Evidor allows to search text on hard disks and retrieves the context of keyword occurrences on computer media, not only by examining all files (the entire allocated space, even Windows swap/paging and hibernate files), but also currently unallocated space and so-called slack space. That means it will even find data from files that have been deleted, if physically still existing. Please note that Evidor cannot access remote networked hard disks.

 

A computer forensics tool that allows to track and to examine web browsing activity and deletion of files through the Windows recycle bin that took place on a certain computer. Deciphers Internet Explorer's ever-growing internal history/cache file index.dat. Displays complete URLs, date and time of the last visit, user names, file sizes, filename extensions, and more. Allows to sort by any criterion. Reads from one more files you specify, or searches complete folders and subfolders, or even entire hard disks (or raw images of hard disks) in allocated space, free space, and slack space, for traces of someone having surfed the Internet. Occasionally, accesses to local files are logged, too. You may search for specific domain, file, and user names.

 

The shredder for the digital age. To protect your organization's confidential data or your personal privacy, trust on X-Ways Security as a hard drive cleansing solution. To maximize security, X-Ways Security offers up to 9 fully configurable overwrite passes and the U.S. Department of Defense (DoD) standard for hard drive sanitization as specified in the 5220.22-M operating manual.

 

Davory undelete files and recovers files from logically corrupted or formatted drives. Incorporates some of the data recovery techniques from WinHex and concentrates on ease of use. Offers two separate, fully automated data recovery mechanisms to maximize your chances of success. One mechanism works with files of any type, the other one recovers JPG, PNG, GIF, TIFF, BMP, MS Word/Excel/PowerPoint (DOC/XLS/PPS/...), RTF, MS Access (MDB), PostScript (EPS), Acrobat (PDF), Quicken (QDF), HTML, XML, DBX, PST, CAD (DWG), PSD, ZIP, GZ, RAR, RIFF (WAV, AVI), Real Audio/Media (RA, RAM, RM), Quicktime (MOV), Windows Media (ASF) and MPEG (MPG). Specifically supports FAT12, FAT16, FAT32, and NTFS. Powerful, yet inexpensive. Personal licenses for non-commercial use are offered at a reduced price.

Davory
 

Peak Limiter: Digital Audio High-Quality Sound Reinforcement [Windows 95/98/Me/NT/2000/XP]

Peak Limiter