With a focus on practical extensibility, expanded decryption support, and richer interpretation of storage structures, 21.6 reinforces X-Ways Forensics as a go-to solution for advanced investigations.
Key Capabilities & Highlights
🔐 BitLocker Decryption Enhancements
X-Ways Forensics can now process BitLocker-protected volumes when the proper startup key is available (such as from a .BEK file found in evidence). This makes it easier to unlock and analyze encrypted storage encountered during investigations.
🗃 Improved Archive & Segment Handling
Spanned and segmented collections of files — including multi-part ZIP archive sets and segmented Cellebrite UFDR reports — are now automatically recognized and processed more intuitively, helping analysts avoid manual prep steps.
📊 Expanded Filtering Logic
Regular filters and flexible filter combinations can now be linked with richer logical operations, offering more powerful ways to isolate files that meet complex criteria.
💡 Performance & Stability Focus
Restart behavior after an unexpected termination has been optimized to reduce unnecessary single-threaded reprocessing, improving throughput and overall responsiveness in large cases.
X-Ways Forensics 21.6 makes it easier to handle real-world challenges such as encrypted volumes, multipart evidence sets, and nuanced filtering needs — all while preserving the transparent, examiner-driven approach that forensic professionals depend on. For labs and practitioners requiring deep inspection, dependable decryption support, and control over analytical logic, this release adds meaningful tools without obscuring process or results.