Do you like a application, script or online tool on Gaijin.at?
Help to publish the content for free.

Multiple File Finder X-Tension for X-Ways Forensics

Multiple File Finder can search for filenames and/or path names and add the matching files to a specific report table.

Additionally, files can be exported and automatically renamed in different ways. An user defined text can be added to the comment field of a file or the comment field can be replaced with a text.

After finishing the search, external applications can be run to take over the further analysis of the exported files.

This X-Tension can be used in the dialog "Refine Volume Snapshot" and via the directory browser context menu.

Multiple File Finder supports regular expressions in search terms. All available options and possibilitys are described in detail.

Here is a simple example what you can do with the Multiple File Finder X-Tension:

Find alle files with the names "SYSTEM", "SOFTWARE" and "SAM" in the path "\Windows\System32\config\" AND find all files with the name "NTUSER.DAT", stored in a path containing the text "\Documents and Settings\" AND ignore all files in a system user folder AND add all matching files to the report table "Windows Registry". Export all matching files to an user defined folder and rename it, if necessary. Open the folder with the application "RegistryReport" and run the analysis automatically.

The definition could look like this one:

[Default]
ReportTable=Windows Registry
ExportFolder=<SELECTFOLDER:Select an export folder for Windows Registry files:>

[Item]
Path=Sm:\Windows\System32\config\
Name=R:^(SYSTEM|SOFTWARE|SAM)$
ExportExisting=Overwrite

[Item]
Path=R:\\(Documents and Settings|Dokumente und Einstellungen)\\
Path=RN:\\(All Users|Default User|LocalService|NetworkService)\\$
Name=Sm:NTUSER.DAT
ExportExisting=ForceRenameOverwrite
ExportRenameMask=<NAME>_<PARENT><EXT>

[Finalize]
Execute=open|C:\Applications\RegistryReport\RegReport.exe|||"<LASTEXPORTFOLDER>" /R

Download

Version
1.1
Release
22.05.2013
Size
603 KB
License
Format
RAR
Setup
None
Required
X-Ways Forensics 17.0 or higher

DOWNLOAD Support this application

Additional Downloads

Multiple File Finder X-Tension for X-Ways Forensics 64-Bit (RAR, 819 KB, version 1.1)
This download contains the 64-bit version of the Multiple File Finder X-Tension for X-Ways Forensics 64-bit.

Languages

  • English (user interface and documentation)
  • German (documentation)

Screenshot

Screenshot

Changelog

The changelog for this application is available in the German version of this page only.

Beta Area | Webmasters | Translators | Support | Contact & Terms of Use