#1
Posted 01 December 2011 - 04:37 PM
#2
Posted 01 December 2011 - 04:45 PM
WinFE Win7pe SEx64x86 v1 (PublicRelease).script is here
There will be a version 2 out shortly for release.
If you are so inclined, I need some testers for version 2 before I release it.
If you are interested in testing version 2 PM me.
#3
Posted 01 December 2011 - 05:18 PM
Would it be possible to make this script available on the download portal? This would ease tracking new versions and keeping it visible for new users.
Thanks,
Nuno
#4
Posted 01 December 2011 - 07:44 PM
v2 is completed, cleaned up code and made it more efficient.
cleaned up dpart.cmd, but I still need to add some more error checking in it
Current issue is here:
http://reboot.pro/15883/
I am having difficulties attaching a dynamic disk in VBox and having it recognized by PE.
Already using Wonko's suggestions from above post, but much more is needed.
dynamic disk is recognized as a foreign disk in disk management, and can be imported.
but I need to find the exact .reg settings to automate all this so that I can test
thoroughly and provide a solution.
I don't currently have the facilities to use real hardware at the moment,
so everything needs to go Virtual right now.
I would like to solve this before posting v2
Currently working on the issue as we chat.
- Brito likes this
#5
Posted 02 December 2011 - 01:28 PM
There are two ways of attaching the disk, it can be done from the outside (before starting the vbox instance) or from the inside (of Windows) as an attached VHD. To which method are you referring?
On the first, there shouldn't be a difference. On the second, can't we define the newly attached disk as read-only when it is being mounted?
#6
Posted 02 December 2011 - 01:39 PM
#7
Posted 02 December 2011 - 03:32 PM
Once vm is started, Dynamic disks do not show up in explorer,
in Disk management They are marked as Dynamic, "as they should be,"
but also foreign.
When you move a Dynamic disk to another machine,
which in essence is what I'm doing every time I start the VM,
you must then Import the Foreign Disk.
I need to find the registry entries for the dynamic disk so that it will be ready to go
as it would be on real hardware with dynamic disks already installed.
Hope that makes sense. I left out a lot of info in order to simplify the explanation.
#8
Posted 05 December 2011 - 10:22 AM
.vdi MBR Dynamic Disks are already attached to VM before start of VM.
Once vm is started, Dynamic disks do not show up in explorer,
in Disk management They are marked as Dynamic, "as they should be,"
but also foreign.
When you move a Dynamic disk to another machine,
which in essence is what I'm doing every time I start the VM,
you must then Import the Foreign Disk.
I need to find the registry entries for the dynamic disk so that it will be ready to go
as it would be on real hardware with dynamic disks already installed.
Hope that makes sense. I left out a lot of info in order to simplify the explanation.
Apologies if I'm missing the issue here, I'm used to VMWare. Have you tried converting an existing disk to dynamic?
I created a Win7 HP VM with a single disk. I then converted that disk to dynamic and everything works as it should.
#9
Posted 05 December 2011 - 11:54 AM
I presume that the issue at hand is not (much) connected to Virtual Machines, but to the actual way Dynamic Disks (NOT "Dynamic" as in "Dynamic VHD") behave under 2K/XP and later.Apologies if I'm missing the issue here, I'm used to VMWare. Have you tried converting an existing disk to dynamic?
I created a Win7 HP VM with a single disk. I then converted that disk to dynamic and everything works as it should.
See:
http://technet.micro...101(WS.10).aspx
http://technet.micro...854(WS.10).aspx
Unless Windows 7 has changed the way it deals with this, a 7 PE should behave just like old OS did, i.e. see "new" Dynamic Disks as "foreign".
What you reported on the other thread is that they are automounted in your specific setup.
Can you describe EXACTLY HOW you have your setup so that what you reported is reproducible?
Ideally, though SLOWER you could try replicating it in a Qemu (+QemuManager) VM:
http://www.davereyn.co.uk/download.htm
so that everyone can have a chance at reproducing it. (just as an example I don't use VMware things, not even the "Free" ones).
IF - like you posted now - you booted the 7PE with a "basic" disk attached to it and then (from within the booted 7 PE) you converted it to dynamic, you are doing a nice test (from which we may learn some new things ) BUT you are using the tool OUTSIDE it's scope .
It is a Forensic tool, so you need to have:
- an existing install/system with one or more Dynamic disk(s) working
- access that/those disks from a newly booted 7 PE
Wonko
#10
Posted 05 December 2011 - 01:04 PM
Yes, it is automounted. My win7 VM has just one disk, a dynamic one.Unless Windows 7 has changed the way it deals with this, a 7 PE should behave just like old OS did, i.e. see "new" Dynamic Disks as "foreign".
What you reported on the other thread is that they are automounted in your specific setup.
The simplest way is to take an existing VM and using Disk management, convert the existing basic disk into a dynamic one. You will then get the issue I posted in the previous thread when booting into WinFE.Can you describe EXACTLY HOW you have your setup so that what you reported is reproducible?
Sorry if I misled, I am doing it OUTSIDE WinFE. This is to set up the OS for booting into WinFE which is what I thought RoyM was having trouble with. Like I said, I may have misunderstood the issue.IF - like you posted now - you booted the 7PE with a "basic" disk attached to it and then (from within the booted 7 PE) you converted it to dynamic, you are doing a nice test (from which we may learn some new things ) BUT you are using the tool OUTSIDE it's scope .
Also tagged with one or more of these keywords: winfe
Groups →
Windows Extreme →
Windows PE →
REG command not recognizingStarted by Blackbeauty , 24 Mar 2016 winpe, winfe |
|
|
||
Groups →
Windows Extreme →
Windows PE →
Speed of tools installed in WinFEStarted by Blackbeauty , 24 Jun 2015 winpe, winfe |
|
|
||
Groups →
Security →
Forensics →
WinFE →
Adding Drivers to WinFEStarted by llewis , 25 Oct 2013 drivers, winfe |
|
|
||
|
Boot methods & tools →
WinBuilder →
Projects →
Mini-WinFEStarted by misty , 14 Oct 2013 windows forensic environment and 1 more... |
|
|
|
Groups →
Community forum →
Hello world! →
Hello! Questions commence...Started by llewis , 12 Sep 2013 script, portable, build, winfe and 2 more... |
|
|
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users