But does it do Mac?
Just to clear up any questions on whether WinFE can ‘do a Mac’, well…it can. And Linux too. And of course it can do Windows as well. As long as the machine can be booted to a WinFE CD or USB, then you can image…
Read MoreIt’s time to build your WinFE!
You can now download the WinFE WinBuilder. Thanks to everyone that helped support this effort, it was well worth it. As to a guide on how to use WinFE, it probably isn’t really needed since WinFE is simply a forensic boot disc. So, you…
Read MorePortable Internet Evidence Finder and WinFE
Jad Saliba (of JadSoftware.com) has released an update to his Internet Evidence Finder/IEF in a portable version. Now this sounds really good to have the ability to plug in a USB drive into a running machine to gather the information that IEF…
Read MoreUpdated video and other things
If you haven’t seen Marc Remmert’s video on creating a WinFE ISO, here is his video. Although the WinBuilder method greatly simplifies what Marc shows in his video, it certainly recommended to see what is actually happening to a…
Read MoreDo you wanna be a beta tester for WinFE?
Just before the latest WinBuilder WinFE gets released, would you like to take it on a test run first before the rest of the world gets it? There are some neat features (Bitlocker support, DiskPart batch file, plus others), but the main concern is…
Read MoreWinBuilder Revisited
A big thanks to Royal Meier for providing a script to modify the registry with a WinBuilder Win7PE build. What I thought would be a difficult task of using WinBuilder to build a WinFE ISO, is turning out to be quite simple, at least for…
Read MoreMobaLiveCD
Here is a neat and FREE app to test your Live CDs. Not sure how I missed this one, but instead of creating an entire virtual machine to boot a ISO for testing, you can just run the ISO with MobaLiveCD (http://mobalivecd.mobatek.net/en/). QEMU…
Read MoreWinFE and Triage
On the subject of triage, I have some thoughts which some companies may not like to hear (at least companies selling triage software or ‘triage computer systems’…). Here are some problems I see with several triage systems available;…
Read MoreWhat makes WinFE better/different than other forensic boot discs?
I’ve been asked on occasion, “What makes WinFE better or different than any other boot disc?”. WinFE is Windows based, not Linux. For someone not experienced in Linux, the Windows environment may be easier to use due…
Read MoreFTK Imager 3.0 in the Windows Forensic Environment
By now, most everyone involved with forensics knows about the latest release of FTK Imager 3.0. In my opinion, this is perhaps the best release ever of FTK Imager and probably one of the top releases of software this year because of one of…
Read More