| |
Version/license type |
| Features |
WinHex
Eval. |
WinHex
Personal |
WinHex
Professional |
WinHex
Specialist |
X-Ways
Investigator |
X-Ways
Inv. CTR |
X-Ways
Forensics |
X-Ways
Imager |
| Write disk sectors, edit RAM, save
large files |
|
 |
 |
 |
|
|
* |
|
| Usage in business & organizations permitted |
° |
|
 |
 |
 |
 |
 |
 |
| WinHex Scripts
& WinHex API |
|
|
 |
 |
|
|
* |
|
|
Specialist menu |
|
|
|
 |
 |
 |
 |
|
| Old
DOS cloning/imaging tool (X-Ways Replica) |
|
|
|
v1.3 |
|
|
v2 |
|
| Internal definition of time zones |
|
|
|
 |
 |
 |
 |
|
| Fast hashing algorithms |
|
|
|
 |
 |
 |
 |
 |
|
Internal RAID reconstruction |
|
|
|
 |
|
|
 |
 |
| Support for Windows dynamic disks
and LVM2 |
|
|
|
 |
 |
|
 |
 |
| Support for FAT12, FAT16, FAT32,
TFAT, NTFS |
 |
 |
 |
 |
 |
|
 |
|
| Support for exFAT, Ext2/3/4, CDFS, UDF |
|
|
|
 |
 |
|
 |
|
| HFS, HFS+/HFSJ/HFSX, ReiserFS,
Reiser4, UFS, XFS |
|
|
|
|
 |
|
 |
|
| XWFS, XWFS2 (evidence file container file
systems) |
|
|
|
 |
 |
 |
 |
|
| Create and view evidence file
containers |
|
|
|
|
 |
 |
 |
|
| Disk imaging (raw/dd) and disk
cloning |
|
 |
 |
 |
|
|
 |
 |
| Disk image interpretation (raw/dd,
VMDK, VHD) |
|
|
|
 |
 |
|
 |
|
| Support for .e01 images (evidence
files) |
|
|
|
|
 |
|
 |
 |
| Cases, case reports, advanced
keyword search |
|
|
|
|
 |
 |
 |
|
| Availability of a 64-bit edition |
|
|
 |
 |
 |
 |
 |
 |
|
Viewer component |
|
|
|
|
 |
 |
 |
|
|
Add'l
functions of X-Ways Forensics
(List) |
|
|
|
|
 |
 |
 |
|
| All other functions (examples) |
 |
 |
 |
 |
|
|
 |
|