Menu
  • Home
  • My Books
  • Courses
  • My Events
  • About Me
  • Contact
  • Home
  • My Books
  • Courses
  • My Events
  • About Me
  • Contact

Brett Shavers | Ramblings

Brett's Ramblings

Subscribe to blog
Unsubscribe from blog
Settings
Sign In
If you are new here, Register
  • Forget Username
  • Reset Password
Font size: + –
Subscribe to this blog post Unsubscribe
Print
1 minute reading time (196 words)

Sharing the love with WinFE

Digital Forensics
Brett Shavers
Monday, 09 May 2011
1315 Hits
0 Comments
There have been numerous presentations showing how to build and use a WinFE boot disc around the world.  Most recently I see that IACIS has given a demo this year along with several HTCIA Chapters and a DOD conference as well.  A write up of Imaging a MacBook by Sean Morrissey shows just how easy WinFE is to use on a MacBook based on one demo at IACIS.

As simple as it is to use, it has become even easier to build using WinBuilder.  Probably the most significant difference when using WinBuilder rather than building via WAIK and the command line is the numerous options that can be automatically added, particularly in that of supporting more software able to run on WinFE.



Many examiners have already tried to build and use WinFE, but I know there are a few of you out there that just haven't sat down to give it a whirl.   If you can speak to anyone that uses WinFE, they will each tell you that it is well worth it!

The next coolest thing to be added to WinFE is Colin Ramsden's GUI currently being finalized.   Say goodbye to the DiskPart command line!

Tweet
Share on Pinterest
An update to a long awaited project
Friendly reminders are always nice

About the author

Brett Shavers

Brett Shavers

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Friday, 13 December 2019
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Brett's blog

Posts List

Tag Cloud

University of Washington training Bitcoin Forensics bitcoin 4cast email surveillance Registry Forensics windows fe gmail RegRipper North korea imaging investigations Hacker X-Ways Forensics Practitioner's Guide Volume Shadow Copy Virtualization bitcoin forensics windows forensic environment X-Ways Forensics presentations book Placing the Suspect Behind the Keyboard privacy winfe Windows Forensic Environment tor browser wiretap writing dfir forensics phishing Jimmy Weg investigation Hiding Behind the Keyboard case studies

Search Blog

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.


Even better, support DFIR Training at Patreon and get access to multiple online courses in digital forensics with included ebooks!

http://www.patreon.com/DFIRTraining 

© 2019 Brett Shavers