Brett Shavers's Blog, page 16
July 5, 2014
X-Ways Forensics Practitioner’s Guide Online II
For all XWF I registrations prior to July 17, 2014, you will receive a code for 100% off the XWF II course shown below at the email you registered. The deadline to register in order to receive the 100% discount code for XWF II is July 17, 2014, after which, the course is available for purchase without a discount.
These are on-demand courses and you have lifetime access to both courses (XWF I and XWF II). There will be an XWF III course released during the summer, all who register before July 17, 2014 will receive another 100% off discount code for XWF III. So, for the purchase of XWF I by July 17, you will have lifetime access to XWF I, XWF II and XWF III.
XWF II will be released after the discount codes currently given have expired in a few weeks. The general discount code for 25% off is: xwf1
Members of HTCC, IACIS, and CTIN have received a 30% discount code in their e-mail. If you are a member and did not receive the code, check your e-mail, it should be there. If you belong to a high tech crime group not listed, contact me and I can send a 30% code to your association. Otherwise, feel free to use the 25% discount code.
July 2, 2014
X-Ways Forensics Online Training
I created an X-Ways Forensics online training course at http://courses.dfironlinetraining.com/x-ways-forensics-practitioners-guide. This course, X-Ways Forensics Practitioner’s Guide Online I is introductory to using X-Ways Forensics, but it covers more than enough to cover most of the use of X-Ways in a case.
The XWF II course goes into great detail with more information on using XWF in different scenarios and some more highly specific functions. Although the course is based on the book, it is not the book, nor is it the X-Ways Forensics classroom training. It is however, the least expensive and fastest way to get up to speed on X-Ways Forensics :)
There is a 25% discount code you can use “xwf1” that is good until July 17. Everyone that registers before July 17 receives a separate discount code of 100% for the XWF II online course that will be released as soon as this discount period ends. Both courses are the same cost, but the discount is valid only until July 17.
If you can’t attend the X-Ways AG classroom training due to cost or time, this online training fits both your pocketbook and daily schedule.
June 11, 2014
New X-Tension: Up to 30GB min speeds on SSD drives!
A new X-Tension, “C4All” is available for download (free) at http://www.x-ways.net/forensics/x-tensions/index.html. C4All is used to categorize pictures and videos, processing skin tone and video stills. Speeds up to 30GB min speeds on SSD drives have been observed.
If you are an X-Ways user, this is one of those cool “little” things that will make you excited.
June 9, 2014
Digital Forensics Book of the Year!
The X-Ways Forensics Practitioner’s Guide won the Best Digital Forensics Book of the Year award at the DFIR Summit 2014 in Austin, Texas. I’d like to thank everyone who voted for the XWF Guide and hope the book has helped you in your work.
https://forensic4cast.com/forensic-4cast-awards/2014-results/
May 20, 2014
Don’t blame me…

“Of course you can trust PDF downloads.” – UglyGorilla and KandyGoo
I have been given about a dozen or so URLs from friends with the X-Ways Practitioner’s Guide as downloads. Mostly, I am given the URLs so I can let the publisher know and they can take the pirated files down (good luck with that….).
If you ever considered downloading these sort of of things, just a thought, don’t do it! I’d hate for bad things to happen to your computer because of a file with my name on it that was manipulated by Unit 61398 or some other hacking organization.
April 3, 2014
Vote for your favorite book
Don’t forget to vote for the XWF Guide at http://forensic4cast.com/2014/04/2014-forensic-4cast-awards-meet-the-nominees/. But of course, only vote if you liked it :)
And if you didn’t like it (which means you don’t have XWF…), vote for my other book, Placing the Suspect Behind the Keyboard. But again, only vote if you liked it :)
And if you didn’t like that book either…give me your phone number. We need to talk…
April 2, 2014
Humbled and honored
Forensic 4cast Awards
I just saw that the book of the year nominees at the Forensic 4cast Awards include both the X-Ways Practitioner’s Guide and Placing the Suspect Behind the Keyboard. For those that made the nominations, that was very kind. For those that vote for either book, I thank you in advance.
Both books are pretty good. Each gives plenty of tips and information to save you hours of frustration, and more importantly, close some cases. There is a sample chapter of Placing the Suspect Behind the Keyboard here: http://searchsecurity.techtarget.com/feature/Placing-the-Suspect-Behind-the-Keyboard There are reviews at Amazon for both books that may be helpful if you were thinking of getting either book.
If you use X-Ways…..you need the X-Ways Guide, no matter how long you have been using X-Ways. When I asked Eric to help me write this book, he ran with it and did a super job of helping create an easy to read guide to using a very powerful forensic tool. I have more than a ton of emails of how the book converted Encase/FTK primary users into XWF primary users.
As for the Placing the Suspect Behind the Keyboard, that has also helped more than a few examiners close a case with a simple (yet elusive) tip, trick, method, or process that saves hours, if not days, of work. Again, even if you have been doing forensics for a long time, nothing says you can’t learn or relearn something you may not know or have forgotten.
Thanks again to everyone.
Brett
March 7, 2014
Hey look! Now there is a book on FTK.
I previously posted that a book on FTK is sure to come along, since we have the best book of X-Ways and the other book on Encase. Now comes a book on FTK. Just like the XWF Guide or the upcoming Encase guide, I wouldn’t see any reason for a FTK user to not have a book on FTK.
It makes sense to have “the” book on X-Ways, “the” book on Encase, and “the” book on FTK. By having books on your major forensic suites, it is easier to compare what suite “A” does compared to tools “B” and “C” as well as how to get from point A to B using each tool.
So….how about that book on ProDiscover? Anyone? Grab the opportunity before someone else does. I promise to buy it, as I have already ordered the FTK and Encase books.
I have brief reviews on my favorite DF books at http://winfe.wordpress.com/books/
————————————————————————–
March 3, 2014
Not X-Ways, but of interest to Encase users
I know, this has nothing to do with X-Ways Forensics. But hey, the X-Ways Practitioner’s Guide was first…
Practically, this seems like a good book for Encase users to park on the shelf (while the X-Ways Practitioner’s Guide sits on your desk next to your keyboard).
So, when is that book on “FTK” coming out….and who is going to write it?…And if you do want to write it, give Syngress a shout.
March 1, 2014
WinFE (and of course, XWF)
Taking WinFE to even another level on a multiboot thumbdrive. Very cool, but I spread this word to you because there are few things in life neater than a forensically bootable CD/USB with X-Ways Forensics.
From Hacking Exposed: Adding the WinFE Image to the Multiboot Thumbdrive Image (Video)





