* New filename conventions for sector superimposition. The expected filenames are now like "n.sector", where n is the name of the start sector and the new extension is ".sector".
* New variant of skeleton imaging called "snippet imaging". Hold the Ctrl key when invoking the File | Create Skeleton Image menu command to start snippet imaging. Any sectors that are being read by X-Ways Forensics from any disk or image while snippet imaging is active are written into separate files named after the sector number, with a .sector extension, in a subdirectory of the default directory for images named after the disk or volume. Contiguous sector reads are copied to a single file.
Snippet imaging mode can be deactivated by invoking the File | Snippet Imaging menu command. Helpful in very specific situations only, for example for debugging purposes, when in need for very specific sectors only that are best located by the software automatically (e.g. data structures needed when opening a particular file). Compared to skeleton imaging, snippet imaging can be beneficial because no image file of the same size as the source disk is created. (Even if it's a nominal size only and the image is sparse, sparse does not help if the file needs to be sent via Internet or copied to a file system that does not preserve the sparse nature of the file.)
Because of their compatible names, snippet image files can be directly used for sector superimposition. They can also be conveniently restored to a other disks (all such files in the same directory at the same time) by clicking the new button "Snippet imaging" in the File | Restore Image dialog window.
* The digit grouping option has moved from the Data Interpreter options to the general notation options and now has a global effect in the program.
* Option to rename ordinary files in the volume snapshot, not just virtual and carved files, if the Shift key is pressed when a file is right-clicked. Although not exactly forensically sound when dealing with original evidence, this can prove helpful in special situations, for example if a filename or directory is too long to copy a file out of an image etc. The original filename will be kept as the alternative filename. Note that this does not rename the file in the file system, only in the volume snapshot, i.e. the internal database in X-Ways Forensics about the file system.
* Longer filter expression for video processing supported.
