X-Ways Forensics

NOV

25

C4All X-tension update

Posted by Brett Shavers

in Digital Forensics

Update November 14, 2014

Download link to version 3.6.2.d https://www.dropbox.com/s/zewn7myskf...6.2.d.zip?dl=0
This update changes the way the video stills are treated when extracting movies.
-now video stills are extracted if the parent movie is extracted, regardless of whehter
the video still has been type verified.

That is for version 3.6.2.d that fixes a few issues with C4All not handling some characters.

Videos and links to updated guides.

Steps for c4all X-tension updated November 2014.doc
www.dropbox.com/s/sfd3...4.doc?dl=0

Steps to prepare and run C4All X november 2014.doc
www.dropbox.com/s/23ts...4.doc?dl=0

I recommend downloading both guides. ***both Udpated November 2014***

Links to Youtube videos to run X-Tension
www.youtube.com/watch?v=HP6DTzpG0KI - part 1 of 3
www.youtube.com/watch?v=zCIcrA9CldI - part 2 of 3
www.youtube.com/watch?v=53cLlcogr40 - part 3 of 3

3343 Hits

Tags:

X-Ways Forensics

3343 Hits

OCT

19

0

Updates to X-tension and Hash File Manipultator

Posted by Brett Shavers

in Digital Forensics

Hashbrown program 64 bit version only http://1drv.ms/1tLsNnG updated October 10 2014

instructions http://1drv.ms/XNdgeJ
-New Version that handles many duplicates and many unsorted more efficiently posted.

X-tension

Update October 19 2014
download link to version 3.6.2.c http://1drv.ms/1prWU2h
-Fixed issue with extended character support of UTF-16 in XML. should show all but those 0xD800 – 0xDFFF characters.
-Adds the functions of 3.5.12.k as well as option to create a Picture/video library based on MD5 hash value as name and the option to include not confirmed files when extracting pictures and movies. (before the file had to have a type status of Confirmed or newly identified. see post from 27 September in this thread for more details)
- 3.5.12.k
option to include or not include metadata in XML
-The option to run against multiple evidence objects and better naming of folders in c4all folder tree.
-CETS users have toggle to create a CETS XML or not.

2863 Hits

Tags:

X-Ways Forensics

2863 Hits

SEP

30

0

New version of X-Tension

Posted by Brett Shavers

in Digital Forensics

New version of X-Tension
3.6.2.a http://1drv.ms/1rrCJ7s
Changes
-adds the functionality to create a picture/video library.
-adds the ability to extract pictures or movies that are type status of 'not confirmed'
(this was added as there are so many variations of avi formats, that even some valid working movies were not 'confirmed')
If the user does not want these files, they can be filtered out and the X-Tension run excluding filtered or excluded files

3011 Hits

Tags:

X-Ways Forensics

3011 Hits

Brett Shavers | Ramblings

Brett's Ramblings

C4All X-tension update

Updates to X-tension and Hash File Manipultator

New version of X-Tension

DFIR Training

Brett's blog