Brett's Ramblings
Mini-WinFE is out of beta!
Mini-WinFE is out of beta!
The Mini-WInFE project is out of beta (it worked as expected). This is a "mini" FE because it is a tad bit more than the original command line only version and a little less than the full-featured-every-option-available version.
It's fast to build (less than 10 minutes to build and burn to a CD), fast to boot, and fast to image.
Since is it primarily an imaging solution, scripts for FTK Imager, X-Ways Forensics, and the FAU imaging utilities and included. X-Ways does not "come with" this WinFE, you need a license for X-Ways. FTK Imager, like FAU, is free for you to download for use in this Mini-WinFE.
This is the build you want when you need a Windows based imaging boot system. It has been developed from a forensics acquisitions perspective, without an option to build anything other than a write-protected, WinFE OS.
The project is freely downloaded at http://reboot.pro/files/file/375-mini-winfe/
Superb documentation on the Mini-WinFE by Misty can be found here: http://mistype.reboot.pro/mini-winfe.docs/readme.html
More wallpaper has been added to the download page.
About the author
Comments 9
Brett / Misty,
First, Thanks for all you work on this project.
I am just getting started with the WinFE environment so please take that into consideration if my comments are ignorant.
When using the Mini-WinFE environment I ge the following error when trying to use the blackbox program. "The system cannot find the file X:\Programs\bblean\blackbox.exe" I am navigating to the X:\Programs\bblean dir and then executing blackbox.exe. Am I doing something incorrectly?
~mh
For the programs included in Mini-WinFE, choose the "Find Programs" from the menu, type "y" and then enter, then "y" enter. That will put the tools on the start menu. You will have FTK Imager, the write protection application, X-Ways Forensics, and the FAU tools.
You can drill down to the D:\Programs folder to find the programs there too.
Blackbox is basically your explorer GUI shell. You should be able to use the FAU tools in a command shell. If you plug in another USB or CD with portable apps, you can run them under WinFE too. You'll need to mount and read/write the media, but it's an easy way to use an app on the fly if you didn't plan on it being needed at the time.
Brett,
I don't see and menu to select "Find Programs" from. When I boot from the ISO (doing this in VMWare 9 on Windows) I get the cmd window. There is a message in the window that says "a winpeshl.ini file is present, but no commands were successfully launched. This could be caused by incorrect formatting or an invalid executable name. Please consult the documentation for more information." I have unchecked FTKImager and X-ways in case that was the issue but still get that message.
I am using Win 7 Pro (no SP) 32-bit as my source.
By accepting you will be accessing a service provided by a third-party external to https://www.brettshavers.com/
DFIR Training
Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.
© 2021 Brett Shavers