May I see files .evt? Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Support Forum » Hex Editing » May I see files .evt? « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Patricia Monica Delbono
Username: pato

Registered: N/A
Posted on Wednesday, Mar 5, 2008 - 21:38:   

Stefan:
Can I explore files .evt with Win Hex and open it with another application like Winword? I saw the file called SecEvent.evt with win hex and I appreciate importan information but I must show this information to a Judge, how can display this information in an application that this person understand what I found in my investigation?
Thanks
Patricia
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Mar 5, 2008 - 21:46:   

When simply double-clicking an .evt file in X-Ways Forensics, it is automatically converted to a nice HTML file with the binary information converted to human-readable text. Works even for corrupt .evt files. Requires a forensic license, i.e. a license for X-Ways Forensics.
Top of pagePrevious messageNext messageBottom of page Link to this message

Patricia Monica Delbono
Username: pato

Registered: N/A
Posted on Wednesday, Mar 5, 2008 - 22:16:   

Oooops!
My win-hex is professional.
Thanks for your answer
Patricia

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have an account.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.