WinHex is a gadget specially designed to deal with various everyday emergencies. It can be used to check and repair various files, undelete files, data loss due to hard drive corruption, etc. At the same time it also allows you to see files and data hidden by other programs. Overall it's a very good hex editor. Like all foreign tools, we may never read the manual.
1. The language problem is the biggest problem.
2. It is really a headache for those who have been educated by exam-oriented education when they see a lot of text.
3. Don't have time to do these things too lazy. After doing it for so long,
4. The foreign manuals are too rigid, and the functions that are hardly used and the functions that are 100% used are concentrated.
Of course, each industry may use each function at a different frequency. Therefore, for our industry, I still try to use the functions with a relatively high flat rate from the perspective of my own use, and use the actual case method. Speaking of which, it might be better. Please correct me if there are any mistakes. thanks.
1. About the window layout
1.1 About the language
Because I am familiar with the English interface, and the Chinese translation is full of errors, I really can't stand it, so Daifuku also recommends that you use the English interface.
1.2 About the layout of the main window In
many cases, opening the software will be the main window interface like this. In fact, for us, the case window on the left is not needed, because this forensic version is prepared by winhex (x-ways), and its functions cannot be used in the low-level version of winhex. Therefore, you can cancel it on the View->Show->Case Data menu, and leave the largest operation interface to us to see if it is much more refreshing.
2. About software settings The
shortcut key F5 can pop up directly. So let's talk about one by one.
1.
This option is to set whether to display such an option opened by winhex in the right-click menu of the file. My recommendation is to select it, because if you often want to analyze the file, it is very frustrating to find winhex to open it and drag it in. It is very convenient to add it to the right-click menu.
2.
This option is also recommended to be turned on, because winhex can open multiple independent windows. For high-frequency use of this tool, this option is necessary to avoid headaches.
3, 4, 5, 6.
These four options agree to be recommended to fill in ".", just an English period. It means that temporary files, cache files, mirror files, and project files are all stored in the root directory of winhex, because when used frequently, the program will crash because the cache directory path set by the copied winhex program cannot be found. , crashes and cannot work normally, the problem of the low version is okay, especially after the high version 17.0, the setting on this path is not good, which may cause the file start sector in the expanded file system to be all 0, so the opened file system is fundamentally The file could not be recovered.