Mini-WinFE 10 and WinFE 10 Updated
The short story on the newest Mini-WinFE 10 (aka, the download link): Mini-WinFE has been updated and upgraded. I update WinFE developments (including the downloads for Mini-WinFE) at https://www.patreon.com/posts/34814255. The Mini-WinFE…
Read More
5 Cool Things You Can Do with the Windows Forensic Environment (WinFE)
I’m a fan of WinFE. I’ve used it, written about it, helped develop it, taught it, and assisted others to teach it. The way that I talk about it, you’d think that WinFE is the best thing that ever came along, does everything you need in…
Read MoreYe ol’ Windows FE
Not to get into the long history of WinFE, but rather focus on the course I created about 2 years ago…it’s time for an update to the course. There have been almost 5,000 people that signed up for the online WinFE course since 2014. WinFE…
Read More
A little update coming for Mini-WinFE
The developer of Mini-WinFE will be adding a script that will install EnCase Forensic Imager into Mini-WinFE. Misty is a little busy right now, but in a few weeks, should be a reality. So, you’ll have another imaging tool…
Read MoreBarely any updates to WinFE :(
Unfortunately there are so few updates nowadays to WinFE, that this blog is woefully neglected…on a positive note, since WinFE practically needs no updates, there is hardly a need to keep up on WinFE once you have mastered building it. The best and…
Read MoreImage a Surface Pro using bootable UEFI WinFE
Cool WInFE work done by Jeffrey A. Cunningham, Sr Digital Forensic Examiner, US Army (ChiefCham), on imaging a Surface Pro using a bootable UEFI WinFE. It is certainly neat to see this type of testing and research done on ANY forensic tool…
Read MoreUSB Malware and WinFE
The recent release of USB malware, in which any USB device is suspect of being infected after plugging into an unknown-if-clean machine, makes a problem for bootable USB devices in forensic collection. Some of the very scary claims to the USB…
Read MoreForensic Training with WinFE. Cool.
Although, the WinFE module is like, last in the course…But, it’s there!
Read MoreWinFE Taught in Australia
Neat to see WinFE being taught everywhere, as in, everywhere by many. Wish I could have been there for this presentation (mostly because I’d have to be in Australia to see it…). [slideshare…
Read MoreSEARCH High-Tech Crime Trainers to Debut WinFE as a new topic
Super cool. From SEARCH. “The team will debut a new course topic in Dallas: Introduction to Windows Forensic Environment (WinFE). In this lab and lecture, investigators will learn how to create a bootable forensic environment on a thumb…
Read More