Menu
  • Home
  • My Books
  • Courses
  • About Me
  • Contact
  • Home
  • My Books
  • Courses
  • About Me
  • Contact

Brett Shavers | Ramblings

Brett's Ramblings

Subscribe to blog
Unsubscribe from blog
Settings
Sign In
If you are new here, Register
  • Forget Username
  • Reset Password
Brett Shavers

Brett Shavers

JUN
09
2

Internet Evidence Finder (IEF): interview with Jad Saliba of JADSoftware.com

Posted by Brett Shavers
in  Digital Forensics
Jad Saliba, developer of the Internet Evidence Finder (IEF) and other neat software was interviewed recently and mentioned that he has plans to make IEF run portable on WinFE.  If you haven't purchased a copy of IEF (free to LE), take a look at ...
Continue reading
  1503 Hits
Tweet
Recent Comments
Guest — KP
I donated to the IEF project back before Jad started charging for it and he was kind enough to give me two licenses for it. I've ... Read More
Wednesday, 09 June 2010 13:51
Guest — Rob
Agree..Thanks for the Effort on making this work with FE.. Good stuff!
Thursday, 10 June 2010 04:32
1503 Hits
JUN
02
8

More Windows FE and triage notes (WindowsRipper?)

Posted by Brett Shavers
in  Digital Forensics
Matt Churchhill (http://mattchurchill.net/2010/06/windowsripper/) has been doing some work to supercharge RegRipper.  Take a look at his video and while watching, consider how this can affect your method to triage a computer when booted to WinFE...
Continue reading
  1866 Hits
Tags:
winfe
Tweet
Recent Comments
Guest — Rob
Am I correct that once you assign a drive letter to the Volume you are going to be touching the Drive in WinFE?
Wednesday, 02 June 2010 10:30
Guest — Anonymous
If you set a volume to read only, the disk is written to (offset 0x417). If a disk is set to read only, it is not written to. So... Read More
Wednesday, 02 June 2010 11:09
Guest — Matt C
Thanks for the link, Brett. I hadn't thought of putting this on WinFE before, but it's a great idea.
Wednesday, 02 June 2010 11:32
1866 Hits
MAY
28
1

Windows FE and Triage webinar

Posted by Brett Shavers
in  Digital Forensics
This should be a neat webinar on Windows FE and Triage.https://www2.gotomeeting.com/register/892321554Check the "Using WinFE" page for tips on using WinFE for not only triage/preview, but other ways to use the tool.  Until I hear otherwise, I ha...
Continue reading
  1894 Hits
Tags:
winfe
Tweet
Recent comment in this post
Guest — Anonymous
Great Catch..Signed up.. Now only if it was tomorrow we could save you alot of Email! ;-)
Friday, 28 May 2010 22:43
1894 Hits
    Previous     Next
102 103 104 105 106 107 108 109 110 111

Brett's blog

Posts List

Tag Cloud

X-Ways Forensics windows fe expert bitcoin forensics case studies wiretap gmail phishing winfe Jimmy Weg Volume Shadow Copy Hacker dfir imaging tor browser bitcoin X-Ways Forensics Practitioner's Guide windows forensic environment surveillance training Hiding Behind the Keyboard RegRipper University of Washington Virtualization email privacy North korea presentations Windows Forensic Environment 4cast Registry Forensics book Bitcoin Forensics writing Placing the Suspect Behind the Keyboard investigation investigations forensics

Search Blog

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.

Even better, support DFIR Training by subscribing at https://www.dfir.training/subscribe-3 and get access to multiple online courses in digital forensics with included ebooks!

© 2021 Brett Shavers