[swissboy]

WinHex v12.6 SR-7

Changelog:
- SR-2: Some fixes pertaining to evidence file containers
- SR-3: Character at the end of the comments of an evidence object no longer lost
- SR-4: Optional faster slim volume snapshot without cluster allocation scan

Lizenztyp: Shareware ab 46,90 Euro
Homepage: www.winhex.com
Direkt-Download Handbuch (340KB): winhex-d.pdf
Direkt-Download (1.16MB): winhex.zip

Dieser Beitrag wurde von swissboy bearbeitet: 06. Oktober 2005 - 15:08

[emule72ki]

moin moin,
bist du nicht der Meinung das das etwas zu viel Reklame für ein Programm

[swissboy]

Zitat (emule72ki: 29.09.2005, 22:24)

bist du nicht der Meinung das das etwas zu viel Reklame für ein Programm

Nein, erstens ist es gut (um nicht zu sagen sehr gut) und zweitens gibt es Software dir sogar auf der Fronseite weit häufiger erscheint und es meiner Meinung nach weniger verdient hat als WinHex.
Wer nichts davon hält braucht diesen Thread gar nicht erst zu öffen, das ist ja völlig freiwillig.

[swissboy]

WinHex v12.7

Einen Überblick über die umfangreichen Neuerungen der Version 12.7 gibt es hier.

Lizenztyp: Shareware ab 46,90 Euro
Homepage: www.winhex.com
Direkt-Download Handbuch (346KB): winhex-d.pdf
Direkt-Download (1.19MB): winhex.zip

[swissboy]

WinHex v12.7 SR-4

Einen Überblick über die umfangreichen Neuerungen der Version 12.7 gibt es hier.

Letzte bekannte Neuerung:
SR-2: Physische Roh-Images werden wieder automatisch richtig erkannt.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download Handbuch (346KB): winhex-d.pdf
Direkt-Download (1.19MB): winhex.zip

Dieser Beitrag wurde von swissboy bearbeitet: 30. Dezember 2005 - 22:50

[swissboy]

WinHex v12.7 SR-10

Einen Überblick über die umfangreichen Neuerungen der Version 12.7 gibt es hier.

Letzte bekannte Neuerung:
SR-5: Instabilität bei physischen Suchvorgängen behoben.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download Handbuch (346KB): winhex-d.pdf
Direkt-Download (1.19MB): winhex.zip

[swissboy]

WinHex v12.75

Der Changelog wurde leider bisher noch nicht aktualisiert.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download Handbuch (346KB): winhex-d.pdf
Direkt-Download (1.20MB): winhex.zip

[Dat-Katzer]

WinHEX 12.8 SR 1

http://www.x-ways.net/winhex/

MFG Dat-Katzer

[swissboy]

WinHex v12.8 SR-2

Neuerungen in Version 12.8:
- Support for the HFS file system.
- WinHex can now often display the context of search hits for which no physical offset is known (e.g. because the hit is in an NTFS-compressed file).
- The internal ID that files and directories have in the internal volume snapshot can now be seen in an optional column in the directory browser. Sorting by that internal ID can help you easily identifying those files that have been added last to a volume snapshot when you use Specialist | Refine Volume Snapshot.
- While it is not possible to remove files or directories from an evidence file container, you can now belatedly suppress items (e.g. if they were added accidentally). This is how: Open the container and interpret it like a regular image file, hide the items, and then deactivate them with the Specialist | Evidence File Container menu. Unlike hiding, this is a permanent change in the container. Again, this operation does not physically remove items from a container.
- The volume slack (an area on a partition that was formerly called logical surplus sectors in WinHex) is now easily viewable and searchable in newly created volume snapshots as another fictitious file in the root directory.
- On NTFS volumes, the MFT's bitmap is now easily viewable in newly created volume snapshots as another system file stream in the root directory. In that bitmap you can see which FILE records are marked as in use and which ones are unused.
- Improvements in UFS file system support.
- Support for NTFS volumes with extreme $MFT fragmentation improved.
- The mouse wheel now generally scrolls in the window that the mouse cursor currently hovers over, not the window that is active (i.e. has the input focus). The mouse wheel now also works in templates.
- Statistics on total number of items and number of tagged and hidden items in a volume snapshot, available in the Refine Volume Snapshot dialog window. Ability to hide all tagged files on a volume with a single command in the directory browser context menu, in addition to "Hide all untagged items".
- Fictitious items are now counted as files or directories in the directory browser header line.
- Free space and slack space are now highlighted in two different colors.
- Several other minor improvements.
- The Create Drive Contents Table command has been removed from the menu, but before it will be fully removed, it is still available via the Shift+F10 keyboard shortcut. The Create Drive Contents Table command has been superseded by the volume snapshot concept in conjunction with dynamic filters.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (352KB): winhex-d.pdf

[swissboy]

WinHex v12.8 SR-9

Changelog (seit Version 12.8 SR-8):
- An error was fixed that in some situations prevented the prompt for an output filename when exporting a file list from a recursively explored Case Root window.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (352KB): winhex-d.pdf

Dieser Beitrag wurde von swissboy bearbeitet: 07. März 2006 - 14:46

[swissboy]

WinHex v12.85

Neuerungen in Version 12.85:
- Support for Unicode character set in filenames and directory names in most parts of the user interface, notably in the directory browser and the directory tree, implemented so far for NTFS, Ext2/Ext3, ReiserFS/Reiser4 and HFS+. That means Chinese, Russian, Japanese, etc. characters should now be displayed correctly.
- Newly created evidence file containers can now optionally incorporate filenames in Unicode instead of ASCII. For compatibility with older versions of X-Ways Forensics, stick with ASCII.
- New concept: When verifying file types based on signatures, no fictitious items with the presumed correct extensions are listed any more. Instead, the detected type can be seen in the new optional Type column. By default, the Type column shows the same text as the Extension column. The Category column is now based on the Type column, no longer on the Extension column. When a mismatch between filename and type is detected, either when refining the volume snapshot, when previewing files, or when viewing files in the Gallery, both the Type and the Category column turn blue.
- There is also a new filter that conveniently lets you address files of multiple types, in addition to the Category filter. Such filter settings can even be loaded and saved. Works with a slightly adjusted type of File Type Categories.txt file. (forensic licenses only)
- Another new optional column indicates the status of the file type column. Initially "not verified". After checking for filename/file type mismatches: If a file is very small the status is "don't care". If neither the extension nor the signature is known to the file type signature database, the status is "not in list". If the signature matches the extension according to the database, the status is "confirmed". If the extension is referenced in the database, yet the signature is unknown, the status is "not confirmed". If the signature matches a certain file type in the database and the extension matches a different file type or none at all, the status is "newly identified". A filter can be used on this column, too. (forensic licenses only)
- Since for a file with a name/type mismatch there will be no duplicate with the (presumed) right extension any more, a new option was introduced that allows to automatically append the extension shown in the Type column when copying such a file.
- Ability to display timestamps with tenths of seconds in the directory browser. Useful for the file systems NTFS and FAT that provide for this precision in all or some timestamps.
- Support for drive contents table creation finally discontinued.
- The volume snapshot data format has changed. Previously created volume snapshots can be converted automatically for use with v12.85 and later, except for ReiserFS/Reiser4 volumes. Should you encounter problems importing old volume snapshots, you can either recreate the volume snapshot from scratch (thereby losing comments, tags, discovered orphaned files, etc.) or continue using v12.8 for that case/image.
- The way how sorting by the Attribute column works was adjusted. (Help file not yet updated.)
- You may now specify maximum dimensions for the inclusion of pictures in the case report (see Report Table Options in the Case Properties, but also applies to pictures associated with the case as an evidence object). Useful if the report is to be printed and large pictures would be visible partially only on the printout.
- Several other minor improvements.

Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf