Brett's Ramblings

SEARCH High-Tech Crime Trainers to Debut WinFE as a new topic
Brett Shavers
Digital Forensics
Super cool.  From SEARCH. "The team will debut a new course topic in Dallas: Introduction to Windows Forensic Environment (WinFE). In this lab and lecture, investigators will learn how to create a bootable forensic environment on a thumb drive. Using this thumb drive, investigators can then conduct previews of suspect computers in the field, l...
Free WinFE course
Brett Shavers
Digital Forensics
WinFE course to be updated The WinFE online course will be updated sooner with a few neat things that are coming up with WinFE.  Until then, there have been over 2,000 registrations for the course and more every day.I'm impressed that there are so many users interested in using WinFE, but then again, not really.   It's still a really neat...
Cool work at the Windows Triage Environment
Brett Shavers
Digital Forensics
Oh my.   This is very pretty and impressive.  Take a look at the Windows Triage Environment if you haven't done so yet.  It is nice to see work continually being done to improve upon WinFE.  
Last day of discounted X-Ways Forensics online course
Brett Shavers
Books
I'm sure there are a few more people left to register for the X-Ways Forensics online course (XWF I) with the discount code of "xwf1". That's 25% off, plus includes free tuition to the X-Ways Forensics II online course. XWF I is introductory, XWF II is more indepth, quite a bit longer, and will be released in August. XWF III, a shorter course will ...
Thanks to Ken Pryor for his kind review of the WinFE online course
Brett Shavers
Digital Forensics
Ken Pryor wrote a kind review of the WinFE online course.  Take a look at his blog for details..  http://digiforensics.blogspot.com/2014/07/windows-forensic-environment-training.htmlDon't forget, the WinFE online course is just like WinFE...it's FREE!
X-Ways Forensics Practitioner's Guide Online II
Brett Shavers
Books
For all  XWF I registrations prior to July 17, 2014, you will receive a code for 100% off the XWF II course shown below at the email you registered.  The deadline to register in order to receive the 100% discount code for XWF II is July 17, 2014, after which, the course is available for purchase without a discount.Thes...
Mini-WinFE has been updated
Brett Shavers
Digital Forensics
Misty has updated Mini-WinFE.  There are a few very neat updates, like UEFI support!  Don't forget to sign up for free WinFE online training: http://courses.dfironlinetraining.com/windows-forensic-environmentThanks to Misty!   2014.07.03==========* SysWOW64 support added when building from Windows 7/7(SP1)/8/8.1/8.1 Update ...
X-Ways Forensics Online Training
Brett Shavers
Digital Forensics
I created an X-Ways Forensics online training course at http://courses.dfironlinetraining.com/x-ways-forensics-practitioners-guide.  This course, X-Ways Forensics Practitioner's Guide Online I is introductory to using X-Ways Forensics, but it covers more than enough to cover most of the use of X-Ways in a case.The XWF II course goes into ...
Keep up with WinFE on Twitter
Brett Shavers
Digital Forensics
Over 100 viewers of the WinFE online course in the first 24 hours.   There have been a few improvements made based on suggestions from some viewers.  All comments have been positive.   The course will remain free, take your time to watch and don't forget, build your WinFE!  (TIP:  Build the Mini-WinFE.  It is the easie...
WinFE course snafu
Brett Shavers
Digital Forensics
The video provider corrected the course videos from being off-center this morning.  Thanks to  everyone letting me know about the problem.  I'm not surprised at how many viewers there are for the course as it shows how much WinFE is being used or at least how much it is known in the DF community.Here is the Intro video, but you can w...
Windows Forensic Environment - WinFE Online Course Now Available
Brett Shavers
Digital Forensics
Ok, it took a while to get this done, mostly because of other projects.  But it is done.  I have videos of most build methods, tips and tricks, pro's and con's, and aspects of WinFE that you may find important.  I also included every bit of downloadable swag in the course too (batch files, wallpaper, scripts, etc...).All in all, this...
New X-Tension: Up to 30GB min speeds on SSD drives!
Brett Shavers
Digital Forensics
A new X-Tension, "C4All" is available for download (free) at http://www.x-ways.net/forensics/x-tensions/index.html.  C4All is used to categorize pictures and videos, processing skin tone and video stills.  Speeds up to 30GB min speeds on SSD drives have been observed.If you are an X-Ways user, this is one of those cool "little" thing...
Digital Forensics Book of the Year!
Brett Shavers
Books
The X-Ways Forensics Practitioner's Guide won the Best Digital Forensics Book of the Year award at the DFIR Summit 2014 in Austin, Texas.  I'd like to thank everyone who voted for the XWF Guide and hope the book has helped you in your work.    [caption id="attachment_587" align="alignleft" width="620"] https://forensic4cast.com/forensic-4cast-award...
WinFE online is done, except for a few little things
Brett Shavers
Digital Forensics
As with everyone, when you think you have time and make plans, a dozen interruptions will delay even the most determined.  But, the WinFE online course is practically done except for:1) latest build of Mini-WinFE being tested first to incorporate into the course (with UEFI support and a few other goodies)2) reviewing the entire program (a volu...
Don't blame me...
Brett Shavers
Books
[caption id="attachment_579" align="alignleft" width="700"] "Of course you can trust PDF downloads." - UglyGorilla and KandyGooI have been given about a dozen or so URLs from friends with the X-Ways Practitioner's Guide as downloads.  Mostly, I am given the URLs so I can let  the publisher  know and they can take the pirated files down (good luck w...