hezry…I should also add that I am pretty new in the field therefore my knowledge is certainly lacking in many respect.
If you are interested in the field this is a good resource and many of the older discussions contain a wealth of info as well.
Andrew-
thank you….you help me a lot
Dear Hezry,
As a WinHex user, you have a wonderful tool located at TOOLS-> DISK TOOLS-> FILE RECOVERY BY TYPE. You will find about 54 specific headers available for use in data carving. In addition, it is very easy to permanently add more headers to that database if you know of a file type that was missed by X-Ways and know (or can determine) the header. In addition it lets you set the depth and the general location of your data carving. It even gives you the option of sorting your "take" into seperate file folders. All DOC in one folder, all JPG in another, etc.
thank you…but which one is most forensic used between xways and winhex? for my view both are same i think.
Stefan Fleishmann, the author and owner of both programs seems to use them pretty much interchangeably He teaches to install both in the same folder and to Alt-Tab toggle back and forth between them.
We have and use both. However, I prefer WinHex because the Forensic version enforces a strict discipline designed to keep the user from making mistakes in moving evidence around. The truth is that the Forensic version is made for a guy like me to keep me out of trouble and your question prompts me to start accepting the occasional error messages that WinHex will not generate.
There are other differences that appear to me to be more aimed at marketing than anything else. In other words, There are certain things that you can do with a Forensic License that you can't do without it. However, we have licenses to all of his products (Except Game Cheats) and any differences or restrictions in capability are transparent to me. As I recall, when you buy an X-Ways Forensic License, the regular WinHex license is included at no extra cost.
Another possible difference between WinHex and X-Ways Forensics that I often forget is that unlike Encase and FTK (that I use), Stefan seems to be going after more than just the forensic market. Data recovery, and Game cheats are two other places his software is used. I assume that his non-forensics users would have no need for the forensics version.