Brett Shavers | Ramblings

Brett's Ramblings

Font size: + –

Report

1 minute reading time (59 words)

Image a Surface Pro using bootable UEFI WinFE

Digital Forensics

Brett Shavers

Thursday, 16 October 2014

7507 Hits

2 Comments

Cool WInFE work done by Jeffrey A. Cunningham, Sr Digital Forensic Examiner, US Army (ChiefCham), on imaging a Surface Pro using a bootable UEFI WinFE. It is certainly neat to see this type of testing and research done on ANY forensic tool where the results can be shared with everyone.

Thanks ChiefCham!

Image a Surface Pro using bootable UEFI WINFE

Tags:

winfe imaging

About the author

Brett Shavers

Comments 2

Guest - Jeff Gimbel on Wednesday, 20 April 2016 12:24

Great Directions, However my C Drive, the Surface Hard Drive is not available to be acquired by EnCase Any Idea ??

0 Reply

Guest - Brett Shavers on Wednesday, 20 April 2016 13:51

Try something other then EnCase first. That is sometimes the easiest/fastest solution if it works..

0 Reply

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.

Brett Shavers | Ramblings

Brett's Ramblings

Image a Surface Pro using bootable UEFI WinFE

About the author

Brett Shavers

Comments 2

DFIR Training

Brett's blog