free alternative to Xways

Open source Autopsy (and Sleuth Kit) is now available for Windows http//sleuthkit.org/autopsy/desc3.php

WinHex, the precursor to X-Ways, is still available as a free evaluation version
http//x-ways.net/winhex/index-m.html

What exactly are you looking to do that requires this amount of firepower?

I don't even know of a commercial product that can replace X-Ways Forensics D
Plus, XWF is the least expensive of any full fledged forensic suite, yet surpasses more expensive suites in capability.

Why do you need it to be free?

As someone already stated Xways is very (or comparatively) cheap.

I have to say it does get tiring to read post after post about can't afford this or that need free alternative.

This is not a cheap business to be in, study in, or even hobby in. It takes money. Even if you are like a few members who are strictly non Encase, Non FTK, they will admit that there are points that can/will come up where you just can't find something free to solve the issue for you.

OR maybe you can find something that has some features and is free, but you'll have no clue how to use it.

Xways is a good product from what I have done with it, and if someone like Brett is posting about it, then believe that it's worth what is being asked for the price and more.

I have to say it does get tiring to read post after post about can't afford this or that need free alternative.

Exactly. You want the most powerful forensic application available which is already far cheaper than it's inferior competitors but you don't want to pay a penny for it. roll

I'll give benefit of the doubt that anyone who wants a free alternative to a paid product because they don't have money, is probably a student. This is only because I know there are high school forensic clubs without funds and those in college level programs that only have software on loan to students. For the students, take a look at the SANS SIFT suite, which you can use freely. There are other open source or free digital forensics framework applications, such as the Sleuth Kit, that are also freely available.

You can do a complete and thorough examination using open source and free forensic tools, without touching any demo or shareware apps, on most types of exams. This is certainly possible all within SANS SIFT, but even outside of SIFT, you can put together a conglomerate of applications. Google is your friend to find these programs (just off the top of my head, there is FTK Imager, Maresware, Nirsoft, RegRipper, etc…).

Any educational program that teaches students the fundamentals of forensics using Open Source programs, both Linux and Windows based, are doing their students a huge service by actually teaching forensics. The big players, and that includes XWF, have automated forensic processes with bells and whistles, hiding the hard work in the background. If you can first learn forensics by seeing what is actually going on, such as having to type commands of what you need to have done, then the big player programs are that much easier to use and you will be able to really exploit programs like XWF and Encase beyond the average. You are paying for speed, convenience, and user intuitive interfaces in one complete package. There is just simply a cost for those aspects of a commercial forensic suite.

“Digital Forensics with Open Source Tools” by Cory Altheide and Harlan Carvey would be a good start to using non-paid forensic tools.

Conversely, if you are trying to get into this field on a shoestring budget, that probably won’t be possible. Clients aren’t going to want to pay for your start-up costs on their backs, and will really be upset if they discovered they unknowingly funded your start-up. That is another reality of costs for the gear. You need the hardware (desktops, laptops, printers, write blockers, adapters, tools) and the software (commercial products are needed just as hardware is needed). Taking a vendor class or two isn't the solution either. There is a cost to this business.

Yep. )

And since sebastianorossi is a pro (though a "fresh" one) and we are talking of a few hundred bucks (probably the cheapest tool around), in this case I would strongly suggest to buy the tool, i.e. the opposiite 😯 of what is suggested to students, compare with
http//www.forensicfocus.com/Forums/viewtopic/t=9729/start=14/postdays=0/postorder=asc/

jaclaz

Although not "free" I'm liking OSForensics as an inexpensive yet powerful tool.

http//www.osforensics.com/