Image a Surface Pro using bootable UEFI WinFE

surfaceproCool WInFE work done by Jeffrey A. Cunningham, Sr Digital Forensic Examiner, US Army (ChiefCham), on imaging a Surface Pro using a bootable UEFI WinFE.  It is certainly neat to see this type of testing and research done on ANY forensic tool where the results can be shared with everyone.

Thanks ChiefCham!

Image a Surface Pro using bootable UEFI WINFE

Rate this blog entry:
0
Updates to X-tension and Hash File Manipultator
Workarounds to Workarounds (and some hints & remin...
 

Comments 2

Guest - Jeff Gimbel on Wednesday, 20 April 2016 19:24

Great Directions, However my C Drive, the Surface Hard Drive is not available to be acquired by EnCase Any Idea ??

Great Directions, However my C Drive, the Surface Hard Drive is not available to be acquired by EnCase Any Idea ??
Guest - Brett Shavers on Wednesday, 20 April 2016 20:51

Try something other then EnCase first. That is sometimes the easiest/fastest solution if it works..

Try something other then EnCase first. That is sometimes the easiest/fastest solution if it works..
Already Registered? Login Here
Guest
Saturday, 18 November 2017
If you'd like to register, please fill in the username, password and name fields.