| Author |
Message |
   
Patricia Monica Delbono
Username: pato
Registered: N/A
| | Posted on Wednesday, Mar 5, 2008 - 21:38: | |
Stefan: Can I explore files .evt with Win Hex and open it with another application like Winword? I saw the file called SecEvent.evt with win hex and I appreciate importan information but I must show this information to a Judge, how can display this information in an application that this person understand what I found in my investigation? Thanks Patricia |
   
Stefan Fleischmann
Username: admin
Registered: 1-2001
| | Posted on Wednesday, Mar 5, 2008 - 21:46: | |
When simply double-clicking an .evt file in X-Ways Forensics, it is automatically converted to a nice HTML file with the binary information converted to human-readable text. Works even for corrupt .evt files. Requires a forensic license, i.e. a license for X-Ways Forensics. |
   
Patricia Monica Delbono
Username: pato
Registered: N/A
| | Posted on Wednesday, Mar 5, 2008 - 22:16: | |
Oooops! My win-hex is professional. Thanks for your answer Patricia |