Searching in X-Ways Forensics
Abstract
X-Ways Forensics (XWF) provides powerful, fast, and flexible search capabilities including ad hoc searches and highly configurable index-based searches. However, in almost every instance, a nonindexed or, in XWF terms, a Simultaneous Search will meet the needs of most examiners, even in cases with huge numbers of search terms and files. In cases where an indeterminate number of search terms are a possibility, using an index-based search will provide greater benefits. In addition to traditional string-based searches, XWF also supports GREP syntax.
Keywords
Search; Simultaneous; Indexed; GREP; Hex; Logical; Slack space; Position manager; Regular expression; Data interpreter
Information in this chapter ...
Get X-Ways Forensics Practitioner’s Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
