Login  |  Register
Bar Home         Features         Support         Purchase         Contact  
Link Exchange  - Article Details
ARTICLES
WindowsMail.MSMessageStore Primer
This article covers the WindowsMail.MSMessageStore database used by Windows Mail. This article may serve as an aid to forensic examiners or data recovery technicians.
How to gather file signatures from your case
A short guide covering how to quickly gather all file signatures (file headers) from all files within a case for review and/or research purposes. This article will use the tools Header Grab Advanced, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
Viewing and Exporting Winhex search results to CSV
A short guide covering how to quickly view and export search results from Winhex POS files to CSV format. This article may serve as an aid to forensic examiners or data recovery technicians.
Detecting Hidden Worksheets in Excel Spreadsheets
A short guide covering how to quickly search for and detect any hidden worksheets present within a Microsoft Excel Workbook (xls and xlsx). This article will use the tools XLS Worksheet Detect Free and commercial versions, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
Batch Previewing IE Favorite URL files
A short guide covering how to batch preview URL files used to store favorites information in Internet Explorer. This article will use the tool URL Previewer, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
STATISTICS
  • Active Links: 10
  • Pending Links: 3
  • Todays Links: 0
  • Total Articles: 16
  • Total Categories: 4
  • Sub Categories: 0

Viewing and Exporting Winhex search results to CSV

Date Added: November 10, 2009 07:24:44 PM
Author: admin
Category: Documents

This short article covers how to view and export search results from Winhex POS files to CSV (comma separated value).  This article may serve as an aid to forensic examiners or data recovery technicians.

Winhex is an excellent hex editor and is capable performing very fast searches over files any size.  The results are by default saved by a user using the X-Ways POS file format which contains search hit, search term and metadata information.  Sometimes it may be necessary to convert this information into a simpler format for use in third party tools or for use in reports.

POS Viewer, part of Simple Carver Suite allows you to load a Winhex POS file and export the content to CSV format.  The screenshot below show Winhex POS File Viewer, results can be previewed within the original file data and exported to CSV.

Winhex forensic pos viewer format

 

 

Ratings
You must be logged in to leave a rating.
Average rating: (0 votes)
Comments

No Comments Yet.


You must be logged in to leave a Comment.