Brett's Ramblings
WinFE Presentation
I'll be giving a presentation at the CTIN Conference in Seattle, March 2013 on forensic boot systems...
The WordPress.com stats helper monkeys prepared a 2012 annual report for this blog. Here's an excerp...
The WordPress.com stats helper monkeys prepared a 2012 annual report for this blog. Here's an excerp...
I've fielded a few questions via email on building a WinFE over the past few days that I'd like to s...
Colin Ramsden updated his write protect applications and WinFE Lite files. http://www.ramsdens.org.u...
After a colleague posed a question about building VMs from RAIDs, I thought it might be a good topic...
We’ve come to the point where we can conduct a rather complete exam of shadow volumes using dd and E...
Just when you thought WinFE development was done.... Troy Larson (developer of WinFE) has created a ...
Eric Zimmerman and Brett Shavers have started writing the "X-Ways Forensics Practitioner's Guide", d...
This posting is copied from www.reboot.pro, posted by Colin Ramsden on his final version of the WinF...
If you try hard enough, you can circumvent just about anything. That includes hard drive write prot...
We’ve built our SEAT VM and added our target image to it as a virtual disk. The first thing th...
In civil litigation , the procedures for data collection are a little more relaxed as compared to cr...
In this step we’ll add our target system virtual disk to our SEAT VM. We already have the targ...
We now have built a virtual machine from an image of the target system. Next, we’ll build a Wi...
Posts List
Tag Cloud
Windows Forensic Environment
email
forensics
privacy
tor browser
dfir
windows fe
Bitcoin Forensics
book
training
case studies
North korea
Hiding Behind the Keyboard
X-Ways Forensics Practitioner's Guide
bitcoin
RegRipper
winfe
surveillance
Virtualization
4cast
University of Washington
phishing
writing
bitcoin forensics
windows forensic environment
gmail
Jimmy Weg
Placing the Suspect Behind the Keyboard
investigations
Registry Forensics
Volume Shadow Copy
X-Ways Forensics
presentations
Hacker
imaging
investigation
wiretap
Search Blog
DFIR Training
Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.
Even better, support DFIR Training at Patreon and get access to multiple online courses in digital forensics with included ebooks!
© 2019 Brett Shavers