* The cascading style sheet (CSS) definitions for the case report in the text file "Case Report.txt" now come with plenty of built in explanations that should make it easier to adjust the formatting to your liking.
* Option to classify files that you specifically attach to a certain directory or file as what they actually are, e.g. video stills produced outside of X-Ways Forensics, e-mails extracted from e-mail archives outside of X-Ways Forensics, OLE2 objects, attachments of various kinds (in particular of PDF documents), etc. etc. If properly classified as video stills, the attached pictures will be used as previews for the respective parent video file for example. The classification can be seen in the Description column.
* Files that are attached to their respective original counterparts in the volume snapshot automatically via Unique ID now adopt the classification of the original files. Except if the original files have no special classification, in which case the attached files will be marked as attached files.
* Ability to specify the internal description of an image and the examiner name when imaging media automatically through the command line interface. For example, :1 "|e01|G:\Test.e01|My description|Inspector Columbo will acquire the disk with the internal number 1 in Windows in .e01 evidence file format with the name "Test.e01" in the directory G:, with the "My description" as the description and "Inspector Columbo" as the examiner. The parameters are delimited with pipes and may contain spaces. The order of these parameters is fixed. Description and examiner name are optional.
* Recover/Copy: Option to skip files if files with identical names already exist in the output directory.
WinHex 19.0 SR-2
What`s new:
* Fixed inability of v19.0 to read a few sectors on very large hard disks.
* Fixed error in file type verification and uncovering embedded data when run with multiple threads.
* Fixed an error where attachments were not extracted from certain .eml files.
* Fixed new option to link attachments from HTML previews of e-mails in the case report.
* Fixed potentially wrong time zone translation of timestamps in transcoded Nikon photos.
* Some minor fixes and improvements.
Two users confirmed independently that the anti-virus software Webroot SecureAnywhere causes random crashes (program terminations) in X-Ways Forensics. So it is not recommended to use the two on the same computer at the same time.
