– Select Directory, directory-mode is atomatically activated
– Click ‘with sub-folders’ if you need recursive hashing
– Alternatively select some files, file-mode is atomatically activated
– you can switch everytime between both modes
– Choose your Entropy
– If you need to find a part of a single file use ‘one input – one output’ mode
– If you need to find a part of a bulk of files use ‘all in one’ mode
– Add ‘MD5’-Header is necessary for X-Ways Forensics
Start hashing now. A Logfile ist automatically generated.
BlockHasher is Freeware.
If you need source send mail to firstname.lastname@example.org
X-Ways MD5 Hash Manipulator
It will allow you to Add hashes, Remove hashes, Compare hashes and remove the duplicates, create hash set of excluded files, and be in the proper format to quickly import to X-Ways.
This will allow users to maintain their hash sets and create small diff files if needed to distribute when hashes are added/removed from database.
It works on the basis of add or removing records, indicating duplicates and also the ‘-‘ prefix implemented in X-ways. files with ‘-‘ prefix can be anywhere in set, not at the beginning.
X-Ways Forensics Installation Manager (XWFIM)
http://www.winhex.net/ (registered XWF users only)
X-Ways Forensics Report Tweaker (XWFRT)
Magnet Forensics, TSV to TLN Converter
Magnet Forensics provides a FREE tool at http://info.magnetforensics.com/tsv-to-tln-converter, which converts the X-Ways generated TSV file into the TLN format. From the tutorial, this looks to be pretty neat and you can’t beat the price either.
The tutorial on how to use the TSV to TLN Converter can be found at: http://www.magnetforensics.com/convert-x-ways-tsv-data-into-tln-data-for-ief-timeline/
From Dan Mares, http://www.dmares.com
Cool tools from http://www.gaijin.at/en/xtmultifilefinder.php