Below are the relevant parts of the post that started this. It can be applied equally well to a PE based system. Wonko's original post (in Dietmar's XPSP1 with full commandline and NTFS below 10 MB - here) related to using a modular approach for adding programs to a normal type of Windows XP based system - not a Preinstallation Environment (PE). In my personally opinion the WAIK/ADK should be seen as a core from which to develop all WinPE scripts - If you can get an application working in the WAIK then it's probably going to work with every project that uses the same codebase. Using a small core as a test platform enables a better understanding of the dependancies needed for individual applications.īasically if you use a project with a large core set of files, something that includes an Explorer shell for example, and develop an application script based on that project, then it might not work in something that uses a smaller core - a WAIK or ADK build. The method I will try to detail below is essentially based on using the smallest possible core (or base if you prefer) from which to develop a working program script.
Just for the record, this is not really my idea - it's based on a concept/philosophy suggested by Wonko (the Sane) - but please don't let that put you off.
This topic relates to WinPE 2.*\3.*\4\5 - but can be easily adapted for other systems. X-Ways Forensics (copied from local install).Forensic Acquisition Utilities (downloaded automatically).Mini-WinFE has been co-developed with Brett Shavers to facilitate a simplified method for building a Windows Forensic Environment (WinFE).įull documentation is included in the project download and here.Īll you require to create a WinFE in a matter of minutes is the Mini-WinFE download, a Windows Source DVD (or mounted disc image) and any of the third party applications you want to include in the build - the WAIK or ADK is not required. It's been scaled down and developed specifically for digital forensics acquisitions.
0 kommentar(er)
