File System Explorer
Besides "low handing digital fruits" such as mobile apps, documents, system and
registry files, chat and browser history, picture and videos, which can be processed
by the product out of the box, Evidence Center allows you to work on low level with
a comprehensive set of handy tools.
File System explorer window allows you to view and navigate through all
folders and files in a data source, added to your case, including hidden, deleted
and special system files and folders, for example, $OrphanFiles or $Extends. You
can browse any file system, including both mobile and computer ones.
On the picture you can see folder structure of mobile chip-off dump for Android
and subfolders of a folder from a computer
In this window the root node, named Datasource, all data sources, added to a
case. Each data source type is indicated inside "<>" brackets. Particularly,
the chip-off image on the screenshot is marked as (raw) image and the folder
is marked as .
Each volume and folder contain a number in square brackets, for example, "".
This number is non-cumulative amount of files inside particular folder. "Non-cumulative"
means that files inside subfolders are not reflected in this number. Besides, subfolders
are also not calculated.
Q: How to quickly see that at least single file exists inside a folder without
A: See if there is number in square brackets. If there is, some files exist
immediately inside this folder.
Q: How to quickly see that at least single subfolder exists inside a folder
without expanding it?
A: See if there is a "+" at the left of folder name. If there is, at least one
In the bottom of File System window you can see currently selected folder
To inspect files inside particular folder, select this folder in the File
System window of the product. Corresponding files are shown inside Files
window of the tool. In order to make this window visible, navigate to View
main menu item and select File List there:
Files window will be shown:
In this window you can review all files and subfolders inside selected folder.
Selected folder is located at the top of window, to the right of Up button.
You can click this button to navigate to the parent folder of currently selected
Files window allows you to see Created and Modified time
(both UTC) and size (files only). You can sort this list by any column.
When you select a file, it contents will be shown in
Hex Viewer window.
You can copy files and folders recursively from both File System and
Files windows. To do so, right click on a file or folder, you would like
to copy to your machine and select Copy files and folders recursively...
context menu item:
Using this function you can, particularly, extract part of mobile backup to your