It also supports optional sub-parameters to force interpretation of an image as either a physical, partitioned medium (P) or volume (V) and to force interpretation with a certain sector size, where the sector size is optional, e.g. As you can see, the AddImage command supports asterisks. ![]() The quotation marks are required only for parameters that contain spaces. If no path is specified for the case, it will be created in the default directory for cases. ![]() Xwforensics64.exe "NewCase:D:\Cases\My case" "AddImage:Z:\Images\*.e01" "AddImage:Z:\Images\My image.dd" RVS:~ auto You can add images to such a case with the AddImage: command (see below).Ĥ) The command line can be used in X-Ways Forensics (not X-Ways Investigator) to automatically a) create a case, b) add images, and c) refine the volume snapshot of all added evidence objects. xfc case filename as the first parameter. It will be executed instead of opened.ģ) The command line can be used to open an existing case. ![]() specify :0 for hard disk 0.Ģ) The command line can be used to run file editing scripts. 1) You can simply specify the names of files that you wish to open automatically as command line parameters, including path if necessary.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |