Skip to content
Brett's Ramblings Brett's Ramblings Brett's Ramblings
Brett's Ramblings Brett's Ramblings Brett's Ramblings
  • Home
  • My books
  • About me
  • Hire me.
  • Contact
  • Home
  • My books
  • About me
  • Hire me.
  • Contact
Close

Search

  • Home
  • My books
  • About me
  • Hire me.
  • Contact
Subscribe
Brett's Ramblings Brett's Ramblings Brett's Ramblings
Brett's Ramblings Brett's Ramblings Brett's Ramblings
  • Home
  • My books
  • About me
  • Hire me.
  • Contact
  • Home
  • My books
  • About me
  • Hire me.
  • Contact
Close

Search

  • Home
  • My books
  • About me
  • Hire me.
  • Contact
Subscribe

Mini-WinFE is out of beta!

By Brett Shavers
October 14, 2013
9

miniwinfe

Mini-WinFE is out of beta!

The Mini-WInFE project is out of beta (it worked as expected).  This is a “mini” FE because it is a tad bit more than the original command line only version and a little less than the full-featured-every-option-available version.

It’s fast to build (less than 10 minutes to build and burn to a CD), fast to boot, and fast to image.

Since is it primarily an imaging solution, scripts for FTK Imager, X-Ways Forensics, and the FAU imaging utilities and included.  X-Ways does not “come with” this WinFE, you need a license for X-Ways.  FTK Imager, like FAU, is free for you to download for use in this Mini-WinFE.

This is the build you want when you need a Windows based imaging boot system.  It has been developed from a forensics acquisitions perspective, without an option to build anything other than a write-protected, WinFE OS.

The project is freely downloaded at http://reboot.pro/files/file/375-mini-winfe/

Superb documentation on the Mini-WinFE by Misty can be found here: http://mistype.reboot.pro/mini-winfe.docs/readme.html

More wallpaper has been added to the download page.


Discover more from Brett's Ramblings

Subscribe to get the latest posts sent to your email.

Author

Brett Shavers

Follow Me
Other Articles
Previous

X-Ways Forensics and WinFE

Next

Quick video on building a Mini-WinFE

9 Comments
  1. Toy says:
    October 14, 2013 at 18:07

    Daddy is pleased.

    Thanks.

    Reply
  2. Jonas says:
    October 15, 2013 at 02:52

    Awesome
    Thanks

    Reply
  3. Brett Shavers says:
    October 15, 2013 at 18:17

    Thanks Dad.

    Reply
  4. Mark says:
    October 15, 2013 at 20:03

    Brett / Misty,

    First, Thanks for all you work on this project.

    I am just getting started with the WinFE environment so please take that into consideration if my comments are ignorant.

    When using the Mini-WinFE environment I ge the following error when trying to use the blackbox program. “The system cannot find the file X:Programsbbleanblackbox.exe” I am navigating to the X:Programsbblean dir and then executing blackbox.exe. Am I doing something incorrectly?

    ~mh

    Reply
  5. Mark says:
    October 15, 2013 at 20:10

    Follow up comment …

    The only program that I can get to launch is FTK Imager. I must be doing something incorrectly. ???

    Reply
  6. Brett Shavers says:
    October 15, 2013 at 22:25

    For the programs included in Mini-WinFE, choose the “Find Programs” from the menu, type “y” and then enter, then “y” enter. That will put the tools on the start menu. You will have FTK Imager, the write protection application, X-Ways Forensics, and the FAU tools.

    You can drill down to the D:Programs folder to find the programs there too.

    Blackbox is basically your explorer GUI shell. You should be able to use the FAU tools in a command shell. If you plug in another USB or CD with portable apps, you can run them under WinFE too. You’ll need to mount and read/write the media, but it’s an easy way to use an app on the fly if you didn’t plan on it being needed at the time.

    Reply
  7. Mark says:
    October 16, 2013 at 12:34

    Brett,

    I don’t see and menu to select “Find Programs” from. When I boot from the ISO (doing this in VMWare 9 on Windows) I get the cmd window. There is a message in the window that says “a winpeshl.ini file is present, but no commands were successfully launched. This could be caused by incorrect formatting or an invalid executable name. Please consult the documentation for more information.” I have unchecked FTKImager and X-ways in case that was the issue but still get that message.

    I am using Win 7 Pro (no SP) 32-bit as my source.

    Reply
  8. Mark says:
    October 16, 2013 at 14:47

    Ok, figured it out. You must use 7zip to unzip the zipped distribution file. I was really starting to think I was a complete idiot..

    Reply
  9. Brett Shavers says:
    October 16, 2013 at 14:53

    No problem. I just put up a short video, just in case. WinRAR works for unzipping too.

    Reply
Show Comments

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

  • X
  • LinkedIn
  • Bluesky
  • Instagram
  • Mastodon
  • FACT Attribution Framework
  • https://www.dfir.training
  • https://winfe.wordpress.com
  • https://xwaysforensics.wordpress.com

My recent interview on a really good DFIR podcast (Parsing the Truth).

  • X
  • LinkedIn
  • Instagram
  • Bluesky
  • Facebook
  • Mastodon
  • YouTube
Copyright 2026 — Brett's Ramblings. All rights reserved.