Brett's Ramblings

Cloud Storage Forensics
Brett Shavers
Books
http://www.amazon.comI have a detailed review of this book at http://winfe.wordpress.com.  In short, it's a really good book and of all tools to choose for the research in the book, the authors picked X-Ways Forensics.  But then, that should not come as any surprise.There's still time to ask Santa to put this in your stocking...
Cloud Storage Forensics book review
Brett Shavers
Digital Forensics
I've been waiting for this book to come out so I can write something about it.  I had the fortune of being able to read it early as I was asked to be the tech editor of the book.  It's not my book, but if it were, I'd be mighty proud of it.   If you want to skip this review and get to the point, here it is;  get this book, ...
Thesis on WinFE, shared by Alex Van Ginkel
Brett Shavers
Digital Forensics
Very cool of Alex to share his work.  Thanks Alex![caption id="attachment_1020" align="aligncenter" width="465"] http://winfe.files.wordpress.com/2013/12/alex-van-ginkel-final-thesis-msc_27nov.pdf Alex van Ginkel Final Thesis MSc_27nov
Integrated Scripts to WinFE
Brett Shavers
Digital Forensics
There are a few behind the scenes work on creating scripts to integrate forensic applications into WinFE.   This is substantial work for WinFE users as it reduces your effort to add programs during the build process.  Basically, a one button approach to add a forensic application.But, before you wait for these scripts to be written, ...
Cool update to the XWFIM, Portable Install
Brett Shavers
Digital Forensics
Eric is at it again.  This time with a pretty cool update to the X-Ways Forensics Install Manager (v0.0.7.0).  The update to the XWFIM now includes an option to create a portable install to external media.   Page 13 of the Practitioner's Guide to X-Ways Forensics details how to do this manually, but XWFIM does it for you with a ...
X-Ways Forensics Install Manager
Brett Shavers
Digital Forensics
I cannot imagine anyone who uses XWF not having Eric Zimmerman's XWFIM.   Every time I use it, I wonder how I did without it.  XWFIM is available through the XWF support forum.  It's free, but you need a license for XWF to get it.Eric constantly adds little things to it, much like Stefan adds 'little' things to X-Ways Forensics....
X-Ways Forensics Imaging Article
Brett Shavers
Digital Forensics
In case you missed an article on X-Ways Forensics Imaging (page 40), you can download a free copy of the issue of eforensicsmag here:  http://eforensicsmag.com/jumpstart-3-free/[caption id="attachment_471" align="aligncenter" width="379"] You may like the WinFE article too...I know the guy that wrote that article...  The article is an ove...
XWF Guide translations
Brett Shavers
Digital Forensics
There is a possibility that the XWF Guide may be translated into Chinese and Korean.  That would be pretty cool.  I can at least look at the pictures :) 
CyberCrime 2013 Symposium
Brett Shavers
Digital Forensics
[caption id="" align="aligncenter" width="336"] http://cybercrime2012symposium.com/I'm heading to New Hampshire (first time there) to present on Placing the Suspect Behind the Keyboard.   Sounds like a pretty good conference and certainly could not be any further for me to travel in the entire country.  Literally, from one end to the other.  Lookin...
X-PERT Certification Program
Brett Shavers
Digital Forensics
Been using X-Ways Forensics for a while now, have ya?  Been to an X-Ways training class?  Then consider getting certified by X-Ways as an expert (X-PERT) in XWF. http://www.x-pert.eu/ Be sure to set aside time, have your XWF Guide at your side, and dive right in.  It's a real forensics exam that if you pass, have a certificate that a...
A very kind review of Placing the Suspect Behind the Keyboard
Brett Shavers
Digital Forensics
From the Journal of Digital Forensics, Security and Law, Vol. 8(2). http://www.jdfsl.org/subscriptions/abstracts/JDFSL-V8N2-BookReviews-Nash.pdf Thanks for the review!
Something else cool about XWF
Brett Shavers
Digital Forensics
Consider the differences between X-Ways v12 below: X-Ways Forensics version 12With the current version 17: X-Ways Forensics version 17  They look the same! XWF has had literally hundreds upon hundreds of significant updates over this time between v12 and v17, but the interface and usage remains constant.  Personally, I enjoy an update to ...
Cloud Storage Forensics and XWF
Brett Shavers
Digital Forensics
Amazon link to order I recently finished tech editing a book soon to be published on Cloud Storage Forensics.  One of the main tools used was....wait for it...X-Ways Forensics.   Without giving anything about the book away, I was really impressed by the level of detail documented on the amount of research conducted in cloud storage f...
Imaging with X-Ways Forensics
Brett Shavers
Digital Forensics
The current (and free) issue of eForensics Magazine has an article on imaging with X-Ways Forensics.   Of course, the XWF Guide is more detailed, but to get an idea of some of what XWF can do with imaging,  take a look at the article. http://eforensicsmag.com/jumpstart-3-free/   
WinFE article in eForensics Magazine
Brett Shavers
Digital Forensics
There is a new write up on WinFE in a free issue of eForensics Magazine. Check it out, it's free :) [caption id="attachment_984" align="aligncenter" width="356"] http://eforensicsmag.com/jumpstart-3-free/