X-Ways Forensics 19.7

View the partition information and file system structure in image files, detect deleted partitions as well as files and retrieve them, create a catalog of the files and folders on the disk, copy specified files to evidence file containers, and more.

X-Ways Forensics is an advanced work environment for computer forensic examiners. It facilitates disk cloning and imaging, reading of partitioning and file system structures inside raw image files, and recovery of deleted files. This tool has native support for FAT, exFAT, NTFS, and optical disk file systems.