Menu
  • Home
  • Brett's Blog
  • My Books
  • Courses
  • About Me
  • Contact
  • Home
  • Brett's Blog
  • My Books
  • Courses
  • About Me
  • Contact

Brett Shavers | Ramblings

Brett's Ramblings

Subscribe to blog
Unsubscribe from blog
Settings
Sign In
If you are new here, Register
  • Forget Username
  • Reset Password
Brett Shavers

Brett Shavers

JUN
30
4

Create your own WinFE ISO, for free, in just a few minutes

Posted by Brett Shavers
in  Digital Forensics

The below video shows how simply and quickly you can create a WinFE ISO. As you'll see in the video, all you need to do is...
1) Install Windows AIK
2) Download the WinFE batch files
3) Run "createfolders.bat"
4) Copy your forensic tools into a folder
5) Run "createwinfe.bat"
6) Burn your CD with the created ISO

[youtube=http://www.youtube.com/watch?v=VUwDjYC5TUE]

  8070 Hits
Tags:
winfe
Tweet
Recent Comments
Guest — Alex Alborzfard
I created the .ISO following the instructions in the video (the second detailed one), and burned it to a CD. Booted the system off... Read More
Friday, 09 July 2010 03:45
Guest — WinFE
When the command prompt opens, it may take some time before you get a cursor to work with. I can't think of a reason where it woul... Read More
Friday, 09 July 2010 04:11
Guest — Anonymous
I created the .ISO also following the instructions. Everything went fine, so I loaded it up and ran diskpart in the command promp... Read More
Friday, 06 August 2010 06:59
8070 Hits
JUN
29
0

Gargoyle and Windows Forensic Environment

Posted by Brett Shavers
in  Digital Forensics

It is great to see that the Windows Forensic Environment is being used as an accepted forensic platform by software manufactures, such as F-Response (blogged about running F-Response on WinFE) and WetStone.   WetStone has a version of their malware software available  on the WinFE system (although WetStone calls it the Windows Forensic Edition rather than Environment,  I believe they mean the same thing).

  2379 Hits
Tags:
winfe
Tweet
2379 Hits
JUN
28
2

WinFE Teaser Screenshots

Posted by Brett Shavers
in  Digital Forensics

Colin Ramsden has been working feverishly on some modifications to WinFE that will appeal to everyone.    For some teaser screenshots, take a look here.   Bitlocker support, installing drivers while already booted to WinFE, clean shutdown that ejects the CD, and an easy to use Disk Management Console.  Believe it or not, Colin has even more to add.

Given the ability to make your own WinFE ISO with Colin's work, you surely will have one of the best forensic boot environments to date.

  2388 Hits
Tags:
winfe
Tweet
Recent Comments
Guest — Siv
Looks like it's going to be a useful tool. Well done Colin, keep up the good work.
Monday, 28 June 2010 19:45
Guest — Claus Valca
Oooohhh. Such a nice shiny GUI interface. I've got the original stock WinFE build I did and can use when the Linux-based LiveCD ... Read More
Saturday, 17 July 2010 07:29
2388 Hits
    Previous     Next
106 107 108 109 110 111 112 113 114 115

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.


Brett's blog

© 2022 Brett Shavers