
when CDFS co-exists with UDF or if the gaps between the sessions are unusually large), this will detect sessions beyond the first one.
CDFS: Usually all sessions on a multi-session CD/DVDs are detected automatically. UDF: While the first and the last session of multi-session UDF CDs/DVDs will be listed automatically, additional sessions in the middle can be found only with this option. With a forensic license, in a second and third step, this option also searches INDX buffers and $LogFile for noteworthy index record remnants, which either reveal previous names or paths of renamed/moved files/directories that were known to the volume snapshot before or deleted files that the volume snapshot was not aware of before (without file contents, though). after a partition has been recreated, reformatted, moved, resized, or defragmented. NTFS: This option searches for FILE records in sectors that do not belong to the current MFT. FAT12/FAT16/FAT32: This option searches for orphaned subdirectories (subdirectories that are no longer referenced by any other directory). Easy to use.Īdditional Features of Specialist Licensesġ) Particularly thorough file system search * Character sets: ANSI ASCII, IBM ASCII, EBCDIC, (Unicode) * Convert between binary, hex ASCII, Intel Hex, and Motorola S * Erase (wipe) confidential files securely, hard drive cleansing to protect your privacy * 256-bit AES encryption, checksums, CRC32, hashes (MD5, SHA-1, …) * Programming interface (API) and scripting * Drive images & backups (optionally compressed or split into 650 MB archives) * Disk cloning (under DOS with X-Ways Replica) * Particularly flexible search and replace functions * Concatenating and splitting files, unifying and dividing odd and even bytes/words * Editing data structures using templates (e.g.
* Data interpreter, knowing 20 data types * RAM editor, providing access to physical RAM and other processes’ virtual memory * Built-in interpretation of RAID systems and dynamic disks * Native support for FAT, NTFS, Ext2/3, ReiserFS, Reiser4, UFS, CDFS, UDF * Disk editor for hard disks, floppy disks, CD-ROM & DVD, ZIP, Smart Media, Compact Flash, … An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards.
WinHex portable is in its core a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security.