Invisible Drives in WinFE?

If you boot up an evidence machine and don’t see the drives that you should be seeing, before you panic, it might be just a driver issue. There might not be a need to shut down and rebuild your WinFE, or even try another (Linux) bootable OS.  Just use a different computer, search the Internet…

WinFE Success Story

I get a few stories of how WinFE saved the day and a few of these heroes let me retell their story. This is one of them. The ‘detective’ wishes to be unnamed, but for sake of argument, I know who he is… ————————————————————————————————————————  A detective from a California law enforcement agency that had attended…

Mini-WinFE Updated

“Misty” has updated Mini-WinFE, the quick and easy build of the Windows Forensic Environment.  There are some pretty neat updates to the build (listed below).  So far, the best documentation I have seen on WinFE, specifically Mini-WinFE is here: http://mistype.reboot.pro/documents/WinFE/winfe.htm. This is the kind of stuff you want to read in order to really know as…