Download PDF User Manual

Chapter 8 - Data Views
8.1
DATA VIEWS SUMMARY
Each of the Forensic Explorer module tabs contains one or more of the following data
views:
Data View Tabs
Function
Shows the folder structure of the examined device.
Separates artifacts into categories, including files by
extension, files by modified date and flagged files.
Lists individual items and displays their metadata in
columns.
A graphical display of the sectors which make up the
examined device.
A thumbnail presentation of the graphics files.
Hexadecimal view of the currently highlighted item.
Automatic interpretation of user selected data.
Text view of the currently highlighted file.
Content display of currently highlighted file. Displays
of 300 + different file types including video and audio.
A graphical representation of byte level data within
the currently highlighted file.
Displays information contained in the MFT record or
FAT entry for the currently highlighted file.
A breakdown of files metadata components.
Details the start, end and length of each data run on
the disk.
Copyright GetData Forensics Pty Ltd 2010 - 2015, All rights reserved.
75 | P a g e