WinHex is a hexadecimal editor capable of opening disks, sectors, files (native support for FAT, NTFS, Ext2/3, ReiserFS, Reiser4, UFS, CDFS, UDF) and physical memory (RAM). It can read, write and extract data for a further forensic analysis. To help the investigator it offers several data rescue techniques and implements the workflow of a forensic analysis. Further information is available on WinHEX forum: http://www.winhex.net