The Application of X-Ways Forensics in Digital Forensics

›› 2009 ›› Issue (05): 73-75.

The Application of X-Ways Forensics in Digital Forensics

YIN Dan (Laboratory of Digital Forensics, the First Research Institute of Ministry of Public Security, Beijing 100048, China)

X-Ways Forensics在电子数据司法鉴定中的应用

尹丹;

公安部第一研究所电子数据取证与鉴定技术实验室;

Abstract

Abstract: The development and features of several famous digital forensic tools are introduced. The functions and application of volume snapshots of X-Ways Forensics are illustrated, in particular.

Key words: electronic evidence, X-Ways, volume snapshots

摘要： 通过介绍几种常用的电子数据司法鉴定工具的发展概况和特点,并对X-Ways Forensics的磁盘快照等功能,在电子数据司法鉴定工作中的应用进行了阐述。

关键词: 电子证据, X-Ways, 磁盘快照

YIN Dan (Laboratory of Digital Forensics;the First Research Institute of Ministry of Public Security;Beijing 000;China). The Application of X-Ways Forensics in Digital Forensics[J]. , 2009(05): 73-75.

尹丹;. X-Ways Forensics在电子数据司法鉴定中的应用[J]. , 2009(05): 73-75.

[1]	. On the Electronic Evidence in Criminal Procedure [J]. , 2013, 67(2): 80-86.
[2]	CHANG Bin. The Electronic Data Examination in an Economic Dispute Case [J]. Chinese Journal of Forensic Sciences, 2012, 63(4): 100-103.
[3]	DU Zhi-chun, LIAO Gen-wei. Comparative Analysis of the Concepts of Digital Evidence， Electronic Evidence， Scientific Evidence and Electronic Records [J]. Chinese Journal of Forensic Sciences, 2011, 57(4): 64-68.
[4]	QIAN Wei, SHA Jing. Structural Analysis of VMware Virtual Disk and its Application in Electronic Data Examination [J]. Chinese Journal of Forensic Sciences, 2011, 55(2): 60-64.
[5]	HUANG Bu-Gen. Techniques of Password Decryption [J]. Chinese Journal of Forensic Sciences, 2010, 53(6): 33-46.
[6]	GUO Qiu-xiang;ZHU Jin-yi(.Shandong Computer Forensic Institute;Shandong Computer Centre;Jinan 00;China;.Shandong Public Security Bureau;Jinan 000;China). The Construction of the Electronic Data Examination System [J]. , 2010, 0(02): 57-60.
[7]	HUANG Bu-gen;HUANG Zheng;ZHAO Bing(.Department of Forensic Science;Jiangsu Police Institute;Nanjing 00;China;.Department of Network Security;Nanjing Municipal Public Security Bureau;Nanjing 000;China). Two Methods for Identifying the Origin of Trojan Code [J]. , 2009, 0(03): 79-82.
[8]	YU Wen-liang;LI Zheng-xiang;WANG Yue-cong (. Shenzhen Public Security Bureau;Shenzhen 00;. Fujian ZhongZheng Judical Identification Center;Xiamen 00;China). Emergency Methods for Electronic evidence fixing [J]. , 2009, 0(01): 57-60.