We are pleased to announce that a new version of X-Ways Forensics is finally available.
The developers spent a lot of time fixing bugs and improved not only the interface but also the functionality of X-Ways Forensics.
Key improvements include:
- The event timestamp filter and the general timestamp filter are now fully independent of each other;
- Support for multi-part/segmented Zip and 7z archives;
- The ability to calculate and store a “folded” MD5 hash value, which is half the usual size (64 bits). It is a compromise between CRC32 (32 bits) and regular MD5 hashes (128 bits), bridging the gap between them and saving memory or disk space, for example for deduplication purposes;
- The ability to calculate EDRM MIH hash values for extracted email messages and original .eml and .emlx files (if they contain complete headers), for finding emails with a known MIH value, matching against a database, or deduplication;
- Details mode now indicates the presence of JUMBF metadata blocks in JPEG files.
The full list of changes is available at: https://www.x-ways.net/winhex/forum/messages/1/5446.html
Thanks to our productive cooperation, the team of “COMPUTER FORENSICS LABORATORY” CyberLab also helped localize the X-Ways Forensics 21.0 interface into Ukrainian.
Install the update today and take advantage of the improved product.
Link to update X-Ways Forensics 21.0: https://www.x-ways.net/winhex/license.html
