Active disk editor как пользоваться

от admin

Active@ Disk Editor

Active@ Disk Editor is a utility made to help you edit a disk’s raw sector data. The editor displays information in binary and text modes at the same time. You can use this view to analyze the contents of data storage structure elements such as hard disks and partitions.

The Open Disk dialog box displays a list of available storage devices and a list of logical drives.

The Data Inspector displays whatever is currently under the cursor. It does so in ten different formats. This may help you interpret data as displayed in Hexadecimal View. If you choose to view the Data Inspector , the window will always appear docked to the left panel while Active@ Disk Editor .

This section contains help with the following:

  • Starting Active@ Disk Editor
  • Changing the Workspace View
  • Navigating to Key Sectors
  • Editing Tools

Starting Active@ Disk Editor

To start Active@ Disk Editor :

  • From the Active@ Boot Disk shell click Start > Programs > Active@ Disk Editor . The Disk Editor will launch showing you first its Getting Started screen. Depending on what you are looking for, you can choose to open a Disk, File, Disk Image or browse through your computer manually.
  • Click Open and the Active@ Disk Editor workspace will appear:

To browse through the content of the opened item:

  • Click either the hexadecimal area or the text area to focus on it
  • Use the scroll bar, keyboard arrows or the mouse wheel

To toggle the focus between hexadecimal and text panes, press TAB .

Changing the Workspace View

When you start Active@ Disk Editor the default view shows the Info pane on the right and the editing pane on the left, with a Status pane across the bottom. You may change the default configuration of the workspace so that it opens with your custom settings each time.

To change Active@ Disk Editor default options:

  1. In Active@ Disk Editor click View toolbar button. The drop-down list of available views appears.
  2. You can show or hide the Templates view, Properties view, Data Inspector view, Bookmarks view and Find Results view at the left of the workspace, for example for the Templates view:
    • To hide the Templates pane clear the Templates check box
    • To show the Templates pane select the Templates check box or you can simply click on View > Windows and click on templates:
  1. To change the default size of the font in the editing pane select a size from the Text size drop-down list.
  2. To toggle the display of the current address offset between hexadecimal and decimal (from the View menu) choose Hexadecimal Offset .

Navigating to Key Sectors

To navigate to key sectors on the open item:

  • To open a different device or logical drive:
  • Click Open Disk from File menu, or press Ctrl > O . The Open Disk dialog box appears.
  • Click a device or a logical drive to select it. Click Open
  • The Active@ Disk Editor workspace appears
  • To jump to a named sector or offset:
  • From the Navigate menu, choose Go to Offset or Go to Sector . The Go to Offset/Sector dialog box appears
  • To jump to a named offset type the offset value as Decimal. Use a prefix 0x to use hexadecimal values
  • To jump to a named sector in the Sector field type the sector number. To jump to a named cluster, in the Cluster field type the cluster number.
  • Click Ok . The sector/offset appears in the editing panel.
  • To jump to the volume boot sector from the Navigate menu choose Boot Sector (0). The boot sector will open
  • To jump to the partition table, from the Navigate menu choose Partition Table. The partition table sector appears in the editing panel
  • To edit the partition table:
  • From the Navigate menu choose Partition Table . Navigation will be positioned to the sector 0, and Master Boot Record template is applied. The Signature (55 AA) at the end of zero sector marks the end of the Partition Table
  • Review the settings for partition table entries 1, 2, 3 and 4 in a Template view at the left side
  • Turn on edit mode ( Ctrl > Alt > E ) and modify partition table parameters
  • To save changes click Save
  • From the Navigate menu you can jump to many named sectors. These sectors are listed with the sector name and a number that is unique to your hard drive:
  • To jump to the unallocated boot sector, from the Navigate menu choose Unallocated (<your partition size>GB)> Boot Sector (<your sector number>).
  • To jump to various primary NTFS locations, from the Navigate menu choose Primary NTFS (<your partition size> GB) and do one of the following:
  • To jump to the boot sector click Boot Sector (<your sector number>) . The primary boot sector appears in the editing panel
  • To jump to the boot sector copy click Boot Sector Copy (<your sector number>) . The primary boot sector copy appears in the editing panel
  • To jump to the MFT (Master File Table) sector click $MFT (<your sector number>). The MFT sector appears in the editing panel
  • To jump to the MFT mirror click $MFT Mirror (<your sector number>) . The MFT mirror sector appears in the editing panel

Editing tools

You can paste code or text from the Windows Clipboard. Use these tools to copy and paste selected code.

To use editing tools:

  • To toggle whether or not to allow editing in the editing pane, from the Edit menu choose Allow Edit content :
  • To select a whole area:
  • Click anywhere in a navigation view
  • From the Edit menu choose Select All . The whole area is selected.
  • To select part of a sector click and drag the cursor over some code. You can select code this way in either the HEX area or in the text area
  • To copy HEX data if you have already selected code in the HEX area, from the Edit menu choose Copy Formatted Selected HEX data is copied to the Clipboard
  • To copy text data if you selected code in the text area, from the Edit menu, choose Copy. Selected text data is copied to the Clipboard.
  • To paste data from the Clipboard:
  • Click the cursor in the area where you want to paste data.
  • From the Edit menu choose Paste . The data appears
  • To discard all unsaved changes (if any were made) and roll back settings to the way they were at the last save, from the Edit menu click Revert Changes
  • To save changes click Save

Скачать Active Disk Editor 7.3.1

CrystalDiskInfo — одно из лучших приложений для проверки состояния жестких дисков, которые.

Victoria — программа для тестирования жесткого диска. Проводит диагностику и выдает полную.

Бесплатная программа для низкоуровневого форматирования накопителей различных.

Acronis Disk Director — комплекс мощных инструментов для управления дисками и разделами. Включает в.

Partition Assistant — мощное приложение для полного управления разделами жестких дисков на компьютере.

HP USB Disk Storage Format Tool — небольшая утилита для форматирования и создания загрузочного USB-диска.

Редактирование необработанных данных на разделах с помощью Active @ Disk Editor

Может появиться время, когда вам может понадобиться просмотреть необработанные данные на дисковых разделах, и как лучшее программное обеспечение для работы? Есть несколько доступных, но сегодня мы рассмотрим Active @ Disk Editor для Windows PC. Active @ Disk Editor поможет вам просматривать и редактировать необработанные сектора в содержимом физических дисков, разделов и файлов в шестнадцатеричной форме.

Active @ Disk Editor предназначен не только для того, чтобы позволить пользователям редактировать данные, но и просматривать код, который система использует для взаимодействия со своими пользователями. Это мощное приложение, и оно будет работать практически с любой единицей хранения. Логические диски, физические диски и файлы образа диска будут работать без проблемы с унцией.

Active @ Disk Editor для ПК с ОС Windows

Его функции в виде пули:

  1. Быстрые точки навигации
  2. Fast disk info
  3. Поддержка Unicode
  4. Расширенный просмотр шаблонов
  5. Расширенная поддержка exFat

Использование приложения:

Пользовательский интерфейс Active @ Disk Editor лучше подходит для продвинутых пользователей из-за его сложности. Мы бы не назвали это слишком сложным, но новички должны быть осторожны при первом прыжке. Пользовательский интерфейс отображает контекст в режиме HEX, хотя его можно изменить, чтобы отображать их в форматах ASCII и Unicode.

Чтобы открыть диск, пользователи должны сначала выбрать его в проводнике восстановления, а затем различные методы могут быть используется для полного открытия диска. Например, мы могли бы использовать комбинацию клавиш, ctrl + H или просто щелкнуть кнопку «Открыть в Disk Editor», чтобы начать все.

Читать:
Какой минимальный размер шрифта на мобильной версии

Редактор достаточно умен, чтобы применить лучший шаблон для любого данного контента. Он использует шаблон гиперссылки при каждом выборе полей адреса; это облегчает переход в конкретное место как можно быстрее. Кроме того, меню «Навигация» позволяет быстрее посещать требуемые сектора.

Если пользователь хочет отредактировать отображаемый контент, ему или ей будет предложено активировать функцию редактирования либо с помощью Ctrl + Alt + E, либо через Редактировать. Функция «Редактировать» содержит несколько команд, которые пользователи могут использовать при редактировании файлов, и все они имеют соответствующую комбинацию клавиш для загрузки.

Открытие файлов похоже на открытие диска, но разные фикции были под рукой. Например, мы могли бы использовать команду Inspect File Record, которая позволила нам открыть меню File MFT.

Вывод:

Active @ Disk Editor отлично подходит для просмотра и редактирования необработанных данных на разделах, дисках или файлах. Он не был предназначен для начинающих пользователей, но из нашего опыта было бы трудно найти любые приложения, такие как этот, который учитывает ограничение новичков.

Следует отметить, что Active @ Disk Editor был отличным с Windows 10 и можно загрузить здесь бесплатно.

Active disk editor как пользоваться

LSoft Technologies products

Active@ Disk Editor is a freeware advanced tool for viewing & editing raw data (sectors) on Physical Disks including Volumes, Partitions & Files

What is new in version 23
  • Improved user interface and minor bug fixes
  • Kernel version 13.01.31
  • Qt framework switched to Qt 5.12.5
Version 7
  • Added templates for XFS and ReFS filesystem superblocks
  • Adopted for HiDPI (high resolution displays)
  • Improved navigation and search
  • Improved user interface and bug fixes
  • Linux package is now installer
Version 6
  • Enhanced Search & search results navigation
  • Added template for BtrFS Superblock
  • Improved Templates control & behavior
  • Improved Open Object dialog
  • Redesigned Bookmarks, Template View & File Cluster Chain
  • Enhanced Settings, customizable Fonts & Look-n-Feel
Version 5
  • Ability to open and inspect particular files
  • File preview panel renders and displays file content
  • Added navigation through File Entries on opened volume
  • Added Browse My Computer mode to easy access to disks, volumes and files
  • Included both 64-bit and 32-bit versions
  • Bug fixes and GUI tweaks
  • Disk Editor for Linux version is now available for download!

Overview:

Active@ Disk Editor uses a simple, low-level disk viewer which displays information in binary and text modes at the same time. You can use this view to analyze the contents of data storage structure elements such as:

  • Hard disk drives
  • SSD & USB Disks
  • Partitions & Volumes
  • Files
  • Other objects

The Main Features:

  1. 6. Fast navigation points
  2. 7. Filling selection with a pattern
  3. 8. Unicode support
  4. 9. Quick Disk Info
  5. 10. Bookmarks
  1. 11. Data Inspector
  2. 12. Search
  3. 13. Working with images
  4. 14. Hiperlinks in templates

1. Enhanced template view

Template view shows parsed records of the most important areas on disk, allowing easily interpretation and editing. When you navigate to a point of interest, a proper template is selected automatically. The following templates are supported: MBR, GUID Partition table, NTFS boot sector, NTFS MFT file record, FAT boot sector, FAT32 boot sector, FAT directory entry, exFAT boot sector, exFAT directory entry, HFS+ Volume header, HFS+ Catalog Node, HFS+ File Record, Ext2/Ext3/Ext4 superblock, Ext2/Ext3/Ext4 inode, UFS superblock, UFS inode, LDM structures.

As you edit data in Hex, ASCII or Unicode pane or in Templates window, modified data is fully synchronized between views. After each modification a template view is recalculated giving you an up-to-date interpretation of data.

2. Detailed MFT record information

MFT file record template shows data at a high level of details using multiple levels. You can examine a standard header, all attributes and attribute data of the record. The attributes interpreted are: $STANDARD_INFORMATION, $ATTRIBUTE_LIST, $FILE_NAME, $OBJECT_ID, $SECURITY_DESCRIPTOR, $VOLUME_NAME, $VOLUME_INFORMATION, $DATA, $INDEX_ROOT, $INDEX_ALLOCATION, $BITMAP, $REPARSE_POINT, $EA_INFORMATION, $EA, $LOGGED_UTILITY_STREAM.

3. Side-by-side Compare and Edit

Some records like boot sectors have their copies. Templates view automatically detects records supporting copies and shows both main and copy values allowing to compare them. You can arbitrary set an offset of main record and its copy.

4. Fields coloring with data in tooltips

Individual template fields are colored in hexadecimal pane giving a quick overview of all data. As you travel along fields in Templates window, the current field is highlighted in Hex pane. Hover mouse over a colored field to get a tooltip with additional information.

5. Extensive exFAT support

exFAT boot sector as well as all types of exFAT directory entries are supported giving you a detailed information on different exFAT structures. Move template offset up/down feature allows easily navigate between records.

6. Fast navigation points

You don’t need to guess what is the sector of root directory on FAT volume is or where is $MFT record on NTFS partition located. Simply use fast navigation points set up in the menu. When Disk Editor opens an object, the most important areas are detected and automatically added to the list. They include boot sectors, FAT tables, root directory, $MFT and $MFT Mirror and others.

7. Filling selection with a pattern

It might be handy to fill an area on the disk with particular data. Besides simply zeroing an area by providing 00 as hexadecimal value you can specify any hexadecimal or text pattern for better flexibility.

8. Unicode support

Work with hexadecimal, ASCII or Unicode representation of data. Editing data in Unicode pane allows to enter extended characters directly while ASCII and Hexadecimal panes gives you control over individual bytes.

9. Quick Disk Info

Properties window gives a concise overview of disk or partition opened in Disk Editor. If unwanted this information can be hidden to save screen space.

10. Bookmarks

When analyzing large amounts of data don’t get lost when navigating between different points. Easily bookmark locations by keyboard shortcuts and cycle through them. If you need even more flexibility, you can give any bookmark a name and navigate between them using a bookmark window.

11. Inspector

As you move a cursor along, data under cursor is automatically interpreted and shown in Data Inspector in different formats. You can see them as one to four byte numbers as well as time and other useful structures.

12. Search

Search data by ANSI, Hex or Unicode pattern. To speed up the process you can ask to search only at given offset inside used-defined blocks. Regular expressions and wildcard are even greater expand search capabilities.

Examples of using regular expressions:
^\d\d?$ — match integers 0 to 99
^\S+$ — match strings without white space
\b(mail|letter|correspondence)\b — match strings containing ‘mail’ or ‘letter’ or ‘correspondence’ but only match whole words i.e. not ’email’.

13. Working with images

Open raw image created by Active@ Undelete or other Active@ products and investigate it with Disk Editor.

Third party disk image files such as Virtual PC Disk Image (*.vhd) or VMware Disk Image (*.vmdk) are also supported.

14. Hyperlinks in templates

Many templates contain hyperlinks allowing to easily navigate to important data points.

For example, MFT records contain links to first cluster in data runs and MBR provides links to partitions.

Video Guide

This tutorial video eplains major features of Active@ Disk Editor such as viewing and editing raw content of a file or any sector on the drive in hexadecimal or text modes, easy navigation through logical partition stricture of hard disk and more.

Integration with data recovery software

Active@ Disk Editor is a separate, lightweight module of Active @ UNDELETE — advanced data recovery and disk tool. For more features, like:

  • Restore deleted or damaged partitions;
  • Recover deleted files or files from deleted or damaged partitions.
  • Create, format and resize disk partitions (volumes);
  • Recover data from damaged RAID’s;
  • Integrated Disk Editor tool and more please visit Active@ UNDELETE web site

Download DEMO version of Active@ UNDELETE for free:

Contacts:

Active@ Disk Editor is developed by LSoft Technologies Inc.

Since its inception in 1999, LSoft’s mission has been to create software framework for your privacy protection. New unique technologies implementing security standards have been developed to serve this goal. LSoft’s vision is coupled today with a strong commitment to the latest technologies that expand the power and reach of PC for its users.

Active@ Disk Editor is preferred by universities as an essential tool in studying data forensics and security: Active@ Disk Editor presentation

Похожие статьи