* Often X-Ways Forensics can now also retrieve a true deletion timestamp for previously existing files during the particularly thorough file system data structure search. This deleted files can be listed with filenames, path, timestamps etc. * Even more deleted files can now typically be found on NTFS volumes and included in the refined volume snapshot when running the particularly thorough file system data structure search. Please note that the volume snapshot format has changed, so that earlier versions cannot open volume snapshots saved by v15.4 and later. volume snapshot with a lot of files), allowing to open and analyze volumes with many more million files than in earlier versions (roughly 100% more) with the same amount of available main memory. * Considerably reduced main memory requirements for large volume snapshots (i.e. The download link can be retrieved by querying one's license status. A preview version of X-Ways Forensics 15.4 is now available.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |