WinFE Teaser Screenshots
Colin Ramsden has been working feverishly on some modifications to WinFE that will appeal to everyone. For some teaser screenshots, take a look here. Bitlocker support, installing drivers while already booted to WinFE, clean…
Read MoreNew Site and Updates
As you can see, the WinFE site has been migrated to WordPress. This format allows me a little more freedom than Blogger as well as less time maintaining a website. This site and work is free…be patient ;) You can now find the batch…
Read MoreCurrent and Future Development of Windows FE
The WinFE journey… From Troy Larson’s first vision of the Windows Forensic Environment to the improvements currently being made, WinFE is set to become one of the best forensic boot disks/USBs available. The ease to which it can be created has been…
Read MoreInternet Evidence Finder (IEF): interview with Jad Saliba of JADSoftware.com
Jad Saliba, developer of the Internet Evidence Finder (IEF) and other neat software was interviewed recently and mentioned that he has plans to make IEF run portable on WinFE. If you haven’t purchased a copy of IEF (free to LE), take a look…
Read MoreMore Windows FE and triage notes (WindowsRipper?)
Matt Churchhill (http://mattchurchill.net/2010/06/windowsripper/) has been doing some work to supercharge RegRipper. Take a look at his video and while watching, consider how this can affect your method to triage a computer when booted to…
Read MoreWindows FE and Triage webinar
This should be a neat webinar on Windows FE and Triage. https://www2.gotomeeting.com/register/892321554 Check the “Using WinFE” page for tips on using WinFE for not only triage/preview, but other ways to use the tool. Until I hear…
Read More