Hilfe
Neues Thema
Antworten
http://www.winhex.com/winhex.zip
changelog: habe bis jetzt keine gefunden sorry
http://www.x-ways.ne...reenshot-d.html
cya
Dieser Beitrag wurde von Jammer bearbeitet: 29. März 2006 - 23:10
Winhex Hex-editor, Disk-editor Und Mehr Neueste Versionen
#31
UserXYZ 
geschrieben 14. März 2006 - 13:49
WinHex v12.85 SR-2
http://www.winhex.com/winhex.zip
changelog: habe bis jetzt keine gefunden sorry
http://www.x-ways.ne...reenshot-d.html
cya
http://www.winhex.com/winhex.zip
changelog: habe bis jetzt keine gefunden sorry
http://www.x-ways.ne...reenshot-d.html
cya
Nach oben
#32
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 16. März 2006 - 21:06
WinHex v12.85 SR-5
Changelog (seit Version 12.85 SR-2):
- SR-5: Recursive listings in case root window considerably faster now in certain situations.
- SR-5: Taking a standard snapshot of large Ext2/Ext3 volumes now faster, too.
- SR-4: Ability to edit comments in a recursive case root view.
- SR-3: Menu command "Select listed tagged items" now functional for recursive case root view.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
Changelog (seit Version 12.85 SR-2):
- SR-5: Recursive listings in case root window considerably faster now in certain situations.
- SR-5: Taking a standard snapshot of large Ext2/Ext3 volumes now faster, too.
- SR-4: Ability to edit comments in a recursive case root view.
- SR-3: Menu command "Select listed tagged items" now functional for recursive case root view.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
Dieser Beitrag wurde von swissboy bearbeitet: 22. März 2006 - 18:32
#33
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 22. März 2006 - 18:33
WinHex v12.85 SR-7
Changelog (seit Version 12.85 SR-5):
- SR-7: Error fixed that prevented files in "Path unknown" from being copied to evidence file containers.
- SR-7: Error fixed that caused physical RAM beyond 256 MB to be read from wrong memory addresses.
- SR-6: Error fixed that prevented opening encrypted evidence files.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
Changelog (seit Version 12.85 SR-5):
- SR-7: Error fixed that prevented files in "Path unknown" from being copied to evidence file containers.
- SR-7: Error fixed that caused physical RAM beyond 256 MB to be read from wrong memory addresses.
- SR-6: Error fixed that prevented opening encrypted evidence files.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
#34
UserXYZ
geschrieben 27. März 2006 - 09:57
WinHex v12.85 SR-8
http://www.winhex.com/winhex.zip
cya
http://www.winhex.com/winhex.zip
cya
Dieser Beitrag wurde von Jammer bearbeitet: 09. Mai 2006 - 13:58
#35
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 27. März 2006 - 10:08
@Jammer: Der Screenshot in deinem Beitrag #31 den du soeben wieder reingehängt hast wurde von Stan (Moderator) absichtlich entfernt damit er das Thread-Layout nicht sprengt. Bitte verkleinere ihn so das er das Thread-Layout nicht sprengt (max. 660 Pixel breit oder als Thumbnail), oder nimm ihn wieder ganz raus.
Edit: Danke!
Edit: Danke!
Dieser Beitrag wurde von swissboy bearbeitet: 27. März 2006 - 11:28
#36
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 29. März 2006 - 20:52
WinHex v12.85 SR-9
Changelog:
- SR-9: Calendar mode: The color markers were swapped.
This error was specific to v12.85 and now fixed.
- SR-9: The hash set creation menu command was occasionally unavailable. This was corrected.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
Changelog:
- SR-9: Calendar mode: The color markers were swapped.
This error was specific to v12.85 and now fixed.
- SR-9: The hash set creation menu command was occasionally unavailable. This was corrected.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.22MB): winhex.zip
Direkt-Download Handbuch (351KB): winhex-d.pdf
Dieser Beitrag wurde von swissboy bearbeitet: 29. März 2006 - 20:57
#37
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 11. April 2006 - 13:36
WinHex v12.9
Neuerungen in Version 12.9:
- The directory browser is now directly based on volume snapshots. That means, items in report tables that are loaded are mandatorily matched against the volume snapshot, and any items that are not part of the volume snapshot cannot be listed in the directory browser. Since one abstraction layer of data has become obsolete that way, memory utilization per item has been reduced by more than 50%, which is measurable e.g. for a recursive listing of 100,000s items. Filling the directory browser with that many items is also even quicker now. (Loading large report tables with many thousand items is slow, though.)
- Fictitious file "Idle space", in newly created volume snapshots. Covers clusters that are marked as allocated, whose exact allocation, however, X-Ways Forensics could not determine, e.g. because these clusters were only previously allocated and then not properly freed in the file system.
- Additional fictitious files for Ext2/Ext3, ReiserFS, NTFS, FAT, and HFS+ in newly created volume snapshots. There is a brief description of most fictitious files in the program help chapter about the directory browser. The root directory itself is now listed as a special searchable directory for several file systems.
- The contents of archives that are explored in the directory browser (e.g. double-clicked) are now incorporated into the volume snapshot right away, as known from Refine Volume Snapshot.
- New optional directory browser columns reveal the owner and the hard link count of files and directories on NTFS/Ext2/Ext3/ReiserFS/Reiser4/HFS+/UFS volumes. Hard links are now listed on NTFS volumes.
- Support for advanced UDF features such as resident files and directories and variably positioned file set descriptors.
- Improvements in UFS support.
- File size filter.
- Filter for some special values in the Attribute column.
- Optionally, files on the logical drive letters A: through Z: can be opened with the help of the operating system instead of with the built-in logic at the sector level. Please note that this is forensically sound only for write-protected media. On writeable media, Microsoft Windows will at least update (i.e. alter, falsify) the last access timestamp of files you open. The benefit, however, is that access to such files may be noticeably faster in many situations, especially on slow media such as CDs and DVDs, e.g. when you compute hashes or skin color percentages for files in a volume snapshot, because Microsoft Windows employs read-ahead mechanisms and entertains a file caching system. See Options | Security.
- Logging user activity separately for each evidence object becomes optional and is even disabled by default in a fresh installation. If disabled, X-Ways Forensics will generate one large chronological log for the entire case, spanning all evidence objects. Note that a log recorded in either way cannot later be converted to the other style.
- The folder for temporary files used by the separate viewer component is now controlled by WinHex/X-Ways Forensics, i.e. set to the one the user specifies in General Options. However, unlike X-Ways Forensics, the viewer component does not silently accept unsuitable paths on read-only media. Please note that the viewer component, if actually used, also leaves entries in the system registry.
- "File Type Categories.txt" now supports full filenames in addition to filename extensions. Useful for certain files with a well-defined name whose extension is not specific enough:
-;index.dat; Internet Explorer history/cache
-;history.dat; Mozilla/Firefox browser history
- Support for unified contents/report tables and for the category view of tables was dropped.
- The "File Type Signature.txt" database was updated.
- The disk selection dialog window already reveals on which physical disks the volumes mounted as drive letters A: through Z: reside.
- Calendar mode: color markers were swapped in v12.85. This was fixed.
- Several other minor improvements and same fix level as v12.85 SR-8.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.23MB): winhex.zip
Direkt-Download Handbuch (357KB): winhex-d.pdf
Neuerungen in Version 12.9:
- The directory browser is now directly based on volume snapshots. That means, items in report tables that are loaded are mandatorily matched against the volume snapshot, and any items that are not part of the volume snapshot cannot be listed in the directory browser. Since one abstraction layer of data has become obsolete that way, memory utilization per item has been reduced by more than 50%, which is measurable e.g. for a recursive listing of 100,000s items. Filling the directory browser with that many items is also even quicker now. (Loading large report tables with many thousand items is slow, though.)
- Fictitious file "Idle space", in newly created volume snapshots. Covers clusters that are marked as allocated, whose exact allocation, however, X-Ways Forensics could not determine, e.g. because these clusters were only previously allocated and then not properly freed in the file system.
- Additional fictitious files for Ext2/Ext3, ReiserFS, NTFS, FAT, and HFS+ in newly created volume snapshots. There is a brief description of most fictitious files in the program help chapter about the directory browser. The root directory itself is now listed as a special searchable directory for several file systems.
- The contents of archives that are explored in the directory browser (e.g. double-clicked) are now incorporated into the volume snapshot right away, as known from Refine Volume Snapshot.
- New optional directory browser columns reveal the owner and the hard link count of files and directories on NTFS/Ext2/Ext3/ReiserFS/Reiser4/HFS+/UFS volumes. Hard links are now listed on NTFS volumes.
- Support for advanced UDF features such as resident files and directories and variably positioned file set descriptors.
- Improvements in UFS support.
- File size filter.
- Filter for some special values in the Attribute column.
- Optionally, files on the logical drive letters A: through Z: can be opened with the help of the operating system instead of with the built-in logic at the sector level. Please note that this is forensically sound only for write-protected media. On writeable media, Microsoft Windows will at least update (i.e. alter, falsify) the last access timestamp of files you open. The benefit, however, is that access to such files may be noticeably faster in many situations, especially on slow media such as CDs and DVDs, e.g. when you compute hashes or skin color percentages for files in a volume snapshot, because Microsoft Windows employs read-ahead mechanisms and entertains a file caching system. See Options | Security.
- Logging user activity separately for each evidence object becomes optional and is even disabled by default in a fresh installation. If disabled, X-Ways Forensics will generate one large chronological log for the entire case, spanning all evidence objects. Note that a log recorded in either way cannot later be converted to the other style.
- The folder for temporary files used by the separate viewer component is now controlled by WinHex/X-Ways Forensics, i.e. set to the one the user specifies in General Options. However, unlike X-Ways Forensics, the viewer component does not silently accept unsuitable paths on read-only media. Please note that the viewer component, if actually used, also leaves entries in the system registry.
- "File Type Categories.txt" now supports full filenames in addition to filename extensions. Useful for certain files with a well-defined name whose extension is not specific enough:
-;index.dat; Internet Explorer history/cache
-;history.dat; Mozilla/Firefox browser history
- Support for unified contents/report tables and for the category view of tables was dropped.
- The "File Type Signature.txt" database was updated.
- The disk selection dialog window already reveals on which physical disks the volumes mounted as drive letters A: through Z: reside.
- Calendar mode: color markers were swapped in v12.85. This was fixed.
- Several other minor improvements and same fix level as v12.85 SR-8.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.23MB): winhex.zip
Direkt-Download Handbuch (357KB): winhex-d.pdf
#38
swissboy
- Gruppe: aktive Mitglieder
- Beiträge: 1.299
- Beigetreten: 29. Dezember 04
- Reputation: 2
- Wohnort:127.0.0.1
geschrieben 19. April 2006 - 19:10
WinHex v12.9 SR-4
Changelog:
- SR-4: Case root window and archive processing fixed.
- SR-3: Exception errors fixed in embedded picture search and File Recovery by Name.
- SR-2: Context preview for search hits in file slack fixed.
- SR-2: Most PDF documents can now be recovered "by type" with their original, correct size.
- SR-1: When decoding the text in PDF documents for a logical search and no text is found (e.g. because the PDF document is composed of graphical data only, which can be readable text but will not be recognized as text), the ability to detect this situation and issue a warning has been improved.
- SR-1: Logic for processing cross-linked deleted directories on FAT volumes improved.
- SR-1: Path length problem with pictures embedded in documents fixed.
- SR-1: Some other minor improvements.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.23MB): winhex.zip
Direkt-Download Handbuch (357KB): winhex-d.pdf
Changelog:
- SR-4: Case root window and archive processing fixed.
- SR-3: Exception errors fixed in embedded picture search and File Recovery by Name.
- SR-2: Context preview for search hits in file slack fixed.
- SR-2: Most PDF documents can now be recovered "by type" with their original, correct size.
- SR-1: When decoding the text in PDF documents for a logical search and no text is found (e.g. because the PDF document is composed of graphical data only, which can be readable text but will not be recognized as text), the ability to detect this situation and issue a warning has been improved.
- SR-1: Logic for processing cross-linked deleted directories on FAT volumes improved.
- SR-1: Path length problem with pictures embedded in documents fixed.
- SR-1: Some other minor improvements.
Lizenztyp: Shareware ab 46.90 Euro
Homepage: www.winhex.com
Direkt-Download (1.23MB): winhex.zip
Direkt-Download Handbuch (357KB): winhex-d.pdf
#39
Dat-Katzer
geschrieben 22. April 2006 - 12:58
#40
Dat-Katzer
geschrieben 28. April 2006 - 18:49
#41
UserXYZ
geschrieben 09. Mai 2006 - 13:59
WinHex v12.90 SR-10
http://www.winhex.com/winhex.zip
cya
http://www.winhex.com/winhex.zip
cya
Dieser Beitrag wurde von Jammer bearbeitet: 09. Mai 2006 - 13:59
#42
UserXYZ
geschrieben 11. Mai 2006 - 20:56
#43
UserXYZ
geschrieben 24. Mai 2006 - 02:28
#44
UserXYZ
geschrieben 08. Juni 2006 - 01:57
#45
UserXYZ
geschrieben 14. Juni 2006 - 13:34
