X-Ways Forensics Practitioner’s Guide


  • Brett Shavers, is a Digital Forensics Practitioner, expert witness, and Adjunct Instructor for the University of Washington Digital Forensics program.
  • Eric Zimmerman, Eric Zimmerman is a digital forensics examiner, investigator and programmer.

The X-Ways Forensics Practitioner's Guide is more than a manual-it's a complete reference guide to the full use of one of the most powerful forensic applications available, software that is used by a wide array of law enforcement agencies and private forensic examiners on a daily basis.

In the X-Ways Forensics Practitioner's Guide, the authors provide you with complete coverage of this powerful tool, walking you through configuration and X-Ways fundamentals, and then moving through case flow, creating and importing hash databases, digging into OS artifacts, and conducting searches.

With X-Ways Forensics Practitioner's Guide, you will be able to use X-Ways Forensics to its fullest potential without any additional training. The book takes you from installation to the most advanced features of the software. Once you are familiar with the basic components of X-Ways, the authors demonstrate never-before-documented features using real life examples and information on how to present investigation results. The book culminates with chapters on reporting, triage and preview methods, as well as electronic discovery and cool X-Ways apps.

View full description


Information Security professionals of all levels, digital forensic examiners and investigators, InfoSec consultants, attorneys, law enforcement officers. Also can sell to forensic training vendors, government training courses, universities, and high-tech crime associations.


Book information

  • Published: August 2013
  • Imprint: SYNGRESS
  • ISBN: 978-0-12-411605-4


"...good reference manual for anyone who wants to learn more about the XWF software...also highly recommended for expert forensics specialists who want to utilize the fullest potential of the XWF software tools."--Journal of Digital Forensics, Security and Law,Vol 9, No 3

Table of Contents

  1. Installation and Configuration of X-Ways Forensics
  2. Case Management and Imaging
  3. Navigating the X-Ways Forensics Interface
  4. Refine Volume Snapshot
  5. The XWF Internal Has Database and the Registry Viewer
  6. Searching in X-Ways Forensics
  7. Advanced Use of X-Ways Forensics
  8. X-Ways Forensics Reporting
  9. X-Ways Forensics and Electronic Discovery
  10. X-Ways Forensics and Criminal Investigations