The Windows Forensic Environment can be used much like the commonly available Linux Boot disks, in that forensic imaging can be conducted as well as limited forensic analysis, examination, preview, and triage. I wouldn’t say one is ‘better’ than the other, but rather more of a personal choice. And personally, I like being able to use Windows based tools in a boot disk that I can modify to my liking.
If you aren’t planning to build your own WinFE CD now, take a gander at the Using WinFE pages, because at least when you come across an obstacle in a future case, you’ll be able to recall just what WinFE can do, which may solve your problem when it comes.
