Brett Shavers

JUN

13

Winbuilder Tutorial

Posted by Brett Shavers

in Digital Forensics

Check it out, http://reboot.pro/4111/

Perhaps the best and easiest tutorial I've seen on using Winbuilder. Just add the forensic write protect script and that's it. You can customize as you see fit.

Colin Ramsden is working on some really neat changes to his WinFE version, which is being tested now. So far, looking good!

3038 Hits

For those that still haven't tried WinFE....

Posted by Brett Shavers

in Digital Forensics

If you still haven't decided to download it and try it, here is a QuickStart Guide to show only what you need to get going.
[scribd id=91022843 key=key-13pbj0h95qsj4sio15zu mode=list]

2115 Hits

WinFE Script Updated

Posted by Brett Shavers

in Digital Forensics

Colin's Write Protect Script (wp.script) is available, but still considered Beta (and as with any forensic utility, test - test - test). You can download today's version here. wp.scrip t. To make sure you get the most recent version after today, download from the Boxnet from this website. Troy Larson's registry modifications are included in Colin Ramsden's WinBuilder Script. That's all you need.

If anyone would like to formally have their test results posted on this site, feel free to send the results to me.

I would reckon that for anyone that has not taken the time yet to build their own WinFE, there isn't any excuses left now. And like everyone else that waited, you'll wonder why you waited so long.

[scribd id=86138209 key=key-1obkpntx6i3rghfml6mr mode=list]

2372 Hits

Brett Shavers | Ramblings

Brett's Ramblings

Brett Shavers

Winbuilder Tutorial

For those that still haven't tried WinFE....

WinFE Script Updated

DFIR Training

Brett's blog