One of the interesting things I have found online related to WinFE as I create a lesson plan for WinFE is “WTE” or “Windows Triage Environment”. Before you get excited about this project, apparently, unless you work in government, you can’t have it. Per the website, “WTE is released as freeware only for Law Enforcement or Government Agencies uses.” Well darn it. From what I can tell, it is WinFE with some software, including Colin Ramsden’s write protection application,but no super-secret-LE-only programs.
The good news is that in the upcoming tutorial on All Things WinFE, you will be able to make your own WinFE or whatever you want to call it, for free, whether you are a government employee or not.
Another interesting thing I found was that the commercial version of WinFE from ForensicSoft.com is no longer available. From the website, “ Due to recent licensing changes by Microsoft, SAFE is no longer commercially available” and “No longer commercially available, SAFE (System Acquisition Forensic Environment) was the first and only forensically sound Windows boot disk.”
I don’t know when ForensicSoft stopped selling their WinFE (or “SAFE”), but it is no longer. However, I respectfully disagree on SAFE being the first and only forensically sound Windows boot disk….
Stand-by for the WinFE class. It’s getting close to being done I do have a trusty tech-editor to review it prior to release :)
View the full article