X-Ways Software Technology AG WinHex/ X-Ways Forensics Integrated Computer Forensics Suite. Data Recovery and IT Security Tool. Editor Hexadecimal de Archivos, Discos y RAM Manual Copyright © 1995-2006 Stefan Fleischmann. All rights reserved. Índice 1 Introducción ........................................................................................................................................ 1 1.1 Acerca de WinHex y X-Ways Forensics ..................................................................................... 1 1.2 Aviso Legal .................................................................................................................................. 1 1.3 Licencias ...................................................................................................................................... 3 1.4 Differences between WinHex and X-Ways Forensics................................................................. 4 2 Información General .......................................................................................................................... 4 2.1 Editores Hexadecimales............................................................................................................... 4 2.2 Bytes Significativos ..................................................................................................................... 5 2.3 Tipos de Datos Enteros ................................................................................................................ 6 2.4 Tipos de Datos Reales.................................................................................................................. 6 2.5 Tipos de Fecha ............................................................................................................................. 7 2.6 ANSI-/IBM-ASCII ....................................................................................................................... 8 2.7 Checksums ................................................................................................................................... 9 2.8 Digests.......................................................................................................................................... 9 2.9 Consideraciones Técnicas.......................................................................................................... 10 3 Forensic Features.............................................................................................................................. 11 3.1 Case Management ...................................................................................................................... 11 3.2 Evidence Objects........................................................................................................................ 12 3.3 Log & Report Feature ................................................................................................................ 13 3.4 Navegador del Directorio........................................................................................................... 14 3.5 Internal Viewer........................................................................................................................... 16 3.6 Registry Report .......................................................................................................................... 18 3.7 Refined Volume Snapshots........................................................................................................19 3.8 Mode Buttons............................................................................................................................. 20 3.9 Logical Search............................................................................................................................ 21 3.10 Hash Database............................................................................................................................ 22 3.11 Time Zone Concept.................................................................................................................... 23 4 Trabajando con el Editor Hexadecimal.......................................................................................... 24 4.1 Inicio Rapido.............................................................................................................................. 24 4.2 Introducción de Caracteres......................................................................................................... 25 4.3 Modos de Edición ...................................................................................................................... 25 4.4 Barra de Estado .......................................................................................................................... 26 4.5 Scripts......................................................................................................................................... 26 4.6 WinHex API............................................................................................................................... 27 4.7 Editor de Disco........................................................................................................................... 27 4.8 Editor de RAM........................................................................................................................... 29 4.9 Edición de Plantillas................................................................................................................... 29 4.10 Consejos Útiles .......................................................................................................................... 30 5 Recuperación de Archivos................................................................................................................ 31 5.1 File Recovery with the Directory Browser ................................................................................ 31 5.2 File Recovery by Name.............................................................................................................. 31 5.3 File Recovery by Type................................................................................................................ 32 II 5.4 File Type Definitions ................................................................................................................. 34 5.5 Manual Data Recovery............................................................................................................... 35 6 Referencia del Menú......................................................................................................................... 36 6.1 Menú Archivo ............................................................................................................................ 36 6.2 Menú Edición............................................................................................................................. 37 6.3 Menú Búsqueda.......................................................................................................................... 38 6.4 Menú Posición............................................................................................................................ 39 6.5 Menú Ver ................................................................................................................................... 40 6.6 Menú Herramientas.................................................................................................................... 41 6.7 Herramientas de Archivo ........................................................................................................... 43 6.8 Menú Especialista ...................................................................................................................... 44 6.9 Menú Opciones .......................................................................................................................... 48 6.10 Menú Ventanas .......................................................................................................................... 48 6.11 Menú Ayuda............................................................................................................................... 49 6.12 Menú Contextual de Windows................................................................................................... 49 6.13 Directory Browser Context Menu.............................................................................................. 50 7 Opciones............................................................................................................................................. 53 7.1 Opciones Generales.................................................................................................................... 53 7.2 Directory Browser Options ........................................................................................................ 56 7.3 Opciones Deshacer..................................................................................................................... 58 7.4 Opciones de Seguridad............................................................................................................... 58 7.5 Opciones de Búsqueda ............................................................................................................... 59 7.6 Opciones de Reemplazo............................................................................................................. 61 8 Miscelánea ........................................................................................................................................