Tyrhex For Mac

Tyrhex is designed to help IT forensics investigators to analyse file systems or file system artefacts in order to extract evidence from damaged devices. The utility allows the researcher to view the data at byte level, to isolate particular strings, and more.

Once you open a file within the Tyrhex application, you can view the file’s byte values, choose to decode the currently selected byte to Little or Big Endian signed and unsigned values, to create volumes for the selected segment, and so on.

Note that Tyrhex can also open previously generated case or dump files. To help you understand what you can do with the Tyrhex application, make sure to navigate to the built-in help and read more about keyboard shortcuts, Endianness, sectors, blocks, clusters, offset, MBR and GPT, and so on.

Tyrhex offers you the possibility to analyze the file byte by byte, and you get to both isolate certain portions and specify the offset that should be used as reference.

Thanks to the historical bookmarking function included in Tyrhex, all the significant areas can be highlighted, and you can access them at a later time with little effort. The utility also allows you to assign color codes to each entry.

When dealing with damaged file systems or artefacts, Tyrhex can generate virtual volumes that you can browse. The Tyrhex app is using Objective-C classes and a detailed reporting system to help you compare results and draw conclusions.

To sum up, Tyrhex helps you view files content at byte level and includes a collection of powerful analysis tools that can be used to isolate strings, select the offset for reference, create virtual volumes and so on.

The Tyrhex utility also integrates bookmarking capabilities and can be used both for analyzing files and explaining your conclusions.