About Our Software

ExponentTM is the #1 Choice of DFIR
Add-Ons for X-Ways Forensics

ExponentTM is an exclusive library of powerful 64-bit X-Tensions that extend your forensic data analysis, visualization and reporting capabilities, for everyday digital forensic and cyber security investigations.

Features Available
Detect faces in photographs, including individual frames extracted from videos as photographs
Users *** DO NOT *** have to train the program on how to recognize faces. Exponent FacesTM works right out of the box!
Match faces in photographs, including individual frames extracted from videos as photographs, with faces of known persons
Extract faces from photographs, including individual frames extracted from videos as photographs
Extract CLIPS (sections) from videos based on a start and end position or duration
Detection is based on coordinates of eyes, eyebrows, mouth, nose and face contours
Robust frontal face detection
Configurable Detection Accuracy level: 5=Highest, 4=High, 3=Medium, 2=Low, 1=Lowest
Configurable Face Matching Accuracy as a percentage (e.g., balance of probability) between 1% and 100%
Supports real-time face preview during media scans
*** NEW *** Gender recognition
Detection of multiple faces in a photo
Detects faces with head rotation: -30..30 degrees (°) of in-plane rotation and -30..30 degrees (°) out-of-plane rotation
Detected faces are automatically added to X-Ways Forensics case file as a child object to the photograph or captured frame
Ability to enroll multiple faces for matching purposes
Faces can be enrolled from a single portrait photo or a group photo.
From a group photo (e.g., a photo with more than 1 person), faces will automatically be extracted and enrolled
Enrolled Faces Management: add file, add folder, manage enrolled faces cache
Thumbnails of enrolled faces appear in the Faces Matches pane with real-time incremental face match counters
Enrolled faces are automatically saved in a sub-folder within your case file directory. Once enrolled, faces can be kept in the Enrolled Cache folder for future searched.
Extract frames at desired intervals in milliseconds, as low as 34 milliseconds, which is equivalent to 30 frames per second
CLIPS (sections of videos) can be extracted from video files at predefined start and end positions
Stepping through captured video frames using the UP and DOWN ARROW keys and viewing them in the Preview tab will function like (simulate) a video player, directly within X-Ways Forensics. This is a great feature when playing back video evidence for witnesses, investigators, prosecutors, including jurors at trial!
Extracted frames are automatically added to the X-Ways Forensics case file as a child object of the video file (or CLIP)
PICTURE file formats supported: .BMP, .JPG, .PNG
VIDEO file formats supported: .MP4, .MPG, .AVI, .MOV, .FLV, .VOB (and more)
IMPORTANT: it is strongly recommended, prior to running Exponent FacesTM, that users use the Refine Volume Snapshot within X-Ways Forensics. This will ensure that photos and video files embedded in archives, .HEIC files, emails and text messages, are properly extracted, their metadata retrieved and their file signatures confirmed.
CLIPS extracted from VIDEOS are automatically added to their parent VIDEO file, in the XWF case file
FRAMES extracted from VIDEOS (or CLIPS) are automatically added to their parent CLIP (or VIDEO) file, in the XWF case file
Extract FACES are automatically added to their parent FRAME or PHOTO, in the XWF case file
All FACES, FRAMES and CLIPs adopt a Parent/Child relationship when added to the XWF case file. In addition, each takes on an intuitive name that includes details about the parent file and where it was located (e.g., the position within a video file)
Ability to detect, match and extract multiple faces from multiple photographic files in one pass
A single media scan across tagged evidence can include many photos and many video files. No need to scan video files separately or individually.
File naming conventions of all FACES, FRAMES and CLIPS adopt a forensically sound format for overall continuity purposes.
EXAMPLE: [filename] + [offset-or-range-in-milliseconds] + [face-counter if applicable] + [FRAME or FACE or CLIP] + [.jpg]
This is the most affordable forensic focused facial recognition technology available to law enforcement today!
Features Available
Service Providers
Microsoft (Outlook, Hotmail, Office 365)
Google (Gmail)
Yahoo (Yahoo Mail)
AOL (AOL Mail)
Zoho (Zoho Mail)
Other 3rd party IMAP Providers
Keyword Searching
Case Insensitive
GREP (Regular Expressions)
Ability to save keyword lists
Ability to load saved keywords lists
Built-in keyword and GREP expression validator
Ability to target only specific fields in an email message
Ability to target the filename of any attachments
Extract and search text from PDF attachments using Tessaract OCR feature already included with X-Ways Forensics
Date Range Filtering
Custom date range using 24-Hour Clock Format
Ability to specify time (From, To)
Special Note
Emails are saved directly into X-Ways Forensics (XWF)
Email subject appears in XWF via the Name column for ease of review
Supported Artifacts MSAB XRY Magnet Axiom iTunes Backup
SMS Messages
MMS Messages
Instagram Profile
Instagram Direct Messages
WhatsApp Messages
Voicemail Recordings
Voicemail Transcripts
Special Features
Messages are converted into .EML file format
Message attachments are embedded inside the .EML file
Message sender and recipients are coded into .EML
iOS And Android iOS only
Supported Artifacts MSAB XRY Magnet Axiom iTunes Backup
Pictures - all picture file formats supported by the data source. This includes the most common formats: JPG, PNG, HEIC.
Video Files - all video formats supported by the data source. This includes the most common formats: MP4, MOV, HEIC.

We can help your organization realize the full potential of mobile forensics and solve more cases. Discover how you can develop your strategy and capabilities.

Why ExponentTM?

  • #1 Choice DFIR Add-On for X-Ways Forensics
  • Compiled + Fast 64-bit X-Tensions
  • Built by a Team with Law Enforcement & Private Industry Experience
  • Built Exclusively for X-Ways Forensics
  • Extend Your Forensic Discovery, Visualization & Reporting Capabilities
  • What our clients have to say about us


    "API Forensics gives X-Ways Forensics features that I expected XWF to have in the first place!"

    Brett Shavers
    Author of the X-Ways Forensics
    Practitioner's Guide
    (1st and 2nd editions)

    I Love This!

    "I can finally bring mobile device evidence into X-Ways Forensics and search everything at the same time! This is such a HUGE time saver. Thank you!"

    Police Badge
    Chris Spencer
    Law Enforcement


    "If you are looking for the quickest and easiest way to import and process Cloud Mail into your X-Ways Forensics case while preserving data integrity and harnessing the power of X-Ways Forensics, this is it!"

    Derek Frawley
    Certified XWF Trainer, Canada

    How we license
    our software

    Use of ExponentTM is managed via a non-perpetual, annual renewable file-based license subscription.

    Each license includes access to ALL X-Tensions available in the library, including updates and any NEW X-Tensions that are released within the subscription period.

    Each subscription (license) is linked to a specific X-Ways Forensics (XWF) dongle or BYOD/copy protection device, via the device's nLicID. The nLicID can be determined via the About window in XWF.

    ExponentTM can be licensed for multiple computers where a single XWF network dongle is in use, provided that there is an equivalent number of licenses of Exponent purchased.

    Please note that if a subscription is allowed to expire, then the software no longer functions.

    Subscriptions can be configured to coincide with renewal dates of other forensic tools in your lab. Ask us for details.

    More Details

    © API Forensics 2024. All rights reserved.
    X-Ways Forensics is the trademark and copyright of X-Ways Software Technology AG