X-Ways Forensics: Digital Forensics Software
X-Ways Forensics helps law enforcement, auditors, and corporate examiners conduct digital investigations. It is designed for teams requiring a portable tool for data recovery and evidence acquisition.
At a glance
- Category
- Security
- Best for
- Police investigators, Corporate forensic examiners, Lawyers, IT auditors
- Pricing
- Pricing starts at $1,600 per year for a non-perpetual license, with perpetual licenses available for $3,959. X-Ways Investigator is available as a perpetual license for $2,030.
- Key use cases
- Digital Evidence Acquisition, Recovering Deleted Data, Automated Image Review, Remote Forensic Analysis
- Integrations
- F-Response, HTML export
- Official website
- www.x-ways.net
X-Ways Forensics is an integrated work environment designed for computer forensic examiners. It provides tools for analyzing disks, RAIDs, and images, including capabilities for disk cloning and the recovery of deleted files across various file systems such as NTFS, Ext, and APFS.
The software is designed for professional investigators, including police, lawyers, and corporate forensic examiners. It supports technical tasks including registry analysis, browser history examination, and memory analysis for Windows platforms.
Buyers can choose between the full forensics suite or a simplified version called X-Ways Investigator. The system includes Excire Forensics, which uses artificial intelligence to help identify objects and faces within images offline.
Prospective buyers should note that the software has a high technical level and that trial licenses are not publicly available, requiring a formal request from government or corporate entities.
Key Features
Creates forensic copies of disks and supports reading various image formats including .e01 and VMDK.
Includes file carving and techniques to identify lost or deleted partitions and files.
Uses Excire Forensics to automatically recognize image content, detect objects, and identify faces offline.
Supports mass hash calculation using multiple algorithms to verify data authenticity.
Provides internal viewers for Windows Registry files and browser history databases.
Allows developers to create third-party modules to automate investigative tasks.
Use Cases
Using disk imaging and cloning to create forensic copies of storage media for legal proceedings.
Applying file carving and partition recovery to find evidence that was intentionally or accidentally removed.
Using AI to filter and categorize photos by detecting specific objects or people.
Examining storage devices or RAM on remote computers over a network via F-Response.
Best For
Integrations
Pricing
Pricing starts at $1,600 per year for a non-perpetual license, with perpetual licenses available for $3,959. X-Ways Investigator is available as a perpetual license for $2,030.
FAQ
It is designed for professional computer forensic examiners, including police investigators, lawyers, and corporate auditors.
Trial licenses are not publicly available; they are only provided upon request to law enforcement, government agencies, and certain corporations.
No, the Excire Forensics AI module works completely offline on the local machine.
Non-perpetual licenses start at $1,600 per year, while perpetual licenses are available for $3,959. A simplified version, X-Ways Investigator, is available for $2,030.
Source category: Security
Source subcategory: Digital Forensics
