Making the build even easier
There are a few WinFE builders creating a standalone, push button build for WinFE based on WinBuilder. It will be set for defaults selected for forensic soundness and include only that what is needed for WinFE. 
The goal is a about as close to a ‘one-button build’ as possible. All you will need is your Windows install disc. One button, done (well, almost one button).
The intention is to have a few forensic apps automatically installed as you need (such as Autopsy!) without worrying about how to configure adding the tools.
For those that teach classes where WinFE is used, this will cut your training time down by 75% or more, including reducing build errors. For everyone that uses WinFE, your build time will decrease by more than 75% as it will be set up the way you like it.
I’ll post it all when it’s done. But don’t forget what I said about WinFE. You need to try it to see how cool it is. Then you will realize you should have tried it a few years ago.
Discover more from Brett's Ramblings
Subscribe to get the latest posts sent to your email.
That sounds awesome, keep up the good work.
I’d like to hear how you are using WindowsFE in a class environment. Are you teaching about the bootable WindowsFE disk itself or using the tool for something, like onscene previews etc.?
Just curious.. THX for your work..
Rob
I’ve had classes where one or more students only have a Mac at home, making homework difficult unless they add Windows to their Mac. Having a student do that (money, time, etc…) is not really worth it unless the student wants to set up their Mac with a virtual Windows system. And every student usually has various Windows versions on their home computers where software is an issue of working on older OSs or what have you. I’ve had the student build a WinFE in class outfitted with most or all of the software to be used for the quarter. They can then boot their home computer, including an intel Mac, and have everything they need for homework assignments without worrying about their system matching the classroom’s computer.
It also is a great way to force students to do things correctly when no one is watching them at home. With WinFE, drives are offline, the environment is safe, and it is real world practical. Not that I have seen it, but I would imagine that homework is many times done in a forensically unsound manner (how many students have write blockers at home…??) and that is bad practice.
With a forensic tool that runs 100% in WinFE, like X-Ways, students can boot their home system, access an image provided as homework, and conduct the entire exam using WinFE and XWF. I’d like to use all open source on WinFE at some point in a class, but a commercial suite saves on time (more GUI, less command line, etc…).