Jump to content











Photo
- - - - -

Mini-WinFE

windows forensic environment winfe

  • Please log in to reply
34 replies to this topic

#26 Blackbeauty

Blackbeauty

    Newbie

  • Members
  • 27 posts
  •  
    India

Posted 12 August 2015 - 05:50 AM

Hi,

I have created a winfe 8.1 bootable usb disk using Mini-WinFE.2014.07.03 release .

I used that disk to boot a DELL Vostro(3750) Laptop. Everything was going well until I tried to create a physical disk image of a USB 3 Pendrive(SanDisk) using FTK imager. The process exit with an error message saying "Your PC ran into a problem and needs to restart.... BUGCODE_USB3_DRIVER".

I thought the error was due to USB 3.0 driver so I installed those drivers(got from DELL Website) to the system by using the option 'add driver'. But it wont helped, the error keep coming . Please help 



#27 Haiphong

Haiphong

    Frequent Member

  • Advanced user
  • 237 posts

Posted 13 August 2015 - 12:40 PM

Hello Misty,

 

I have tried your Project. It"s very quick to boot from an USB Key. Can you add 2 Scripts and it's very fine !!!

 

1) For "Donet Framework"

2) For PStart to launch "Portable Programs"

 

Thanks !!!



#28 misty

misty

    Silver Member

  • Developer
  • 703 posts
  •  
    United Kingdom

Posted 14 August 2015 - 07:04 AM

Hello Misty,

I have tried your Project. It"s very quick to boot from an USB Key. Can you add 2 Scripts and it's very fine !!!

1) For "Donet Framework"
2) For PStart to launch "Portable Programs"

Thanks !!!


@Haiphong
Thanks for the feedback. MistyPE/Mini-WinFE are lightweight versions of WinPE - .NET would add a lot of bloat. Also I do not know which file and registry entries would need to be added to support .NET - if you can provide this information then I should be able to script a way of adding it.

As a workaround why not use a build based on WinPE 4/5.* and use the Windows ADK - this includes a (minimal) .NET package. See here for using this with Mini-WinFE/MistyPE.

PStart should be easier to add - just stick the program and dependencies in a path specified in the Add Custom Folders\Files script. Or create your own script - see here.


Regards,

Misty

#29 misty

misty

    Silver Member

  • Developer
  • 703 posts
  •  
    United Kingdom

Posted 14 August 2015 - 07:08 AM

Hi,
I have created a winfe 8.1 bootable usb disk using Mini-WinFE.2014.07.03 release .
I used that disk to boot a DELL Vostro(3750) Laptop. Everything was going well until I tried to create a physical disk image of a USB 3 Pendrive(SanDisk) using FTK imager. The process exit with an error message saying "Your PC ran into a problem and needs to restart.... BUGCODE_USB3_DRIVER".
I thought the error was due to USB 3.0 driver so I installed those drivers(got from DELL Website) to the system by using the option 'add driver'. But it wont helped, the error keep coming . Please help


@Blackbeauty
Not sure this is an issue with Mini-WinFE - try using a different imaging program and see if you have the same issue.

It's more likely an FTK Imager issue. Having said that I have no USB 3 hardware so it's not something I'd be in a position to try and troubleshoot anyway. Sorry.

Regards,

Misty
  • Blackbeauty likes this

#30 Haiphong

Haiphong

    Frequent Member

  • Advanced user
  • 237 posts

Posted 14 August 2015 - 08:24 AM

Hello Misty,

 

I want to build an "AutoRun" of "Pstart.exe" from "Pstart Folder". What have I to do ?

 

Thanks for a Reply.



#31 misty

misty

    Silver Member

  • Developer
  • 703 posts
  •  
    United Kingdom

Posted 14 August 2015 - 04:42 PM

@Haiphong
I'm packing for a weeks holiday so you're stuck with the documentation for now.

Sorry!

#32 Haiphong

Haiphong

    Frequent Member

  • Advanced user
  • 237 posts

Posted 15 August 2015 - 05:14 AM

Hello Misty,

 

I wait for your availability.

 

Thanks for your quick reply.

 

Best Regards.



#33 IAmTheTrueMeaningOfCovfefe

IAmTheTrueMeaningOfCovfefe

    Silver Member

  • Advanced user
  • 555 posts
  • Location:In hiding
  • Interests:An investigation is underway to determine whether Trump has any ties to America.
  •  
    United States

Posted 15 August 2015 - 06:10 AM

I have no forensics exp whatsoever, but it's an area of interest I'd like to learn more about on a nonprofessional level, and this seems really interesting, and free. I can play around with it on a spare netbook, which has no important data on it. Or perhaps in a VM. The collection of tools seems nice and has things I'm already semi-familiar with, like Opera (best browser ever), BlackBox/bbLean (a desktop shell replacement I'm very fond of, and WinHex, a bit difficult to use but has features/tools out the wazoo to play with.



#34 hangingmoon2904

hangingmoon2904
  • Members
  • 1 posts
  •  
    United Kingdom

Posted 05 February 2016 - 07:52 AM

Hi Misty,

 

I am completely new to Winbuilder and I am having trouble making a Windows 8.1 x64 version of Mini WinFE that will work with secure boot systems as well as legacy BIOS systems. My main problem is that when I use my Windows 8.1 ISO it is saying that the files required to build it are not there. It seems to work fine with my Windows 8.1 x86 ISO. Any ideas?

 

Many Thanks

 



#35 misty

misty

    Silver Member

  • Developer
  • 703 posts
  •  
    United Kingdom

Posted 12 December 2016 - 07:54 AM

Download links repaired - I've been locked out of reboot.pro for a while and the password reset function was not working - at least not for me!





Also tagged with one or more of these keywords: windows forensic environment, winfe

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users