Brett's Blog

Just some ramblings.

Image a Surface Pro using bootable UEFI WinFE

surfaceproCool WInFE work done by Jeffrey A. Cunningham, Sr Digital Forensic Examiner, US Army (ChiefCham), on imaging a Surface Pro using a bootable UEFI WinFE.  It is certainly neat to see this type of testing and research done on ANY forensic tool where the results can be shared with everyone.

Thanks ChiefCham!

Image a Surface Pro using bootable UEFI WINFE

Workarounds to Workarounds (and some hints & remin...
Updates to X-tension and Hash File Manipultator

Related Posts

 

Comments 2

Guest - Jeff Gimbel on Wednesday, 20 April 2016 19:24

Great Directions, However my C Drive, the Surface Hard Drive is not available to be acquired by EnCase Any Idea ??

0
Great Directions, However my C Drive, the Surface Hard Drive is not available to be acquired by EnCase Any Idea ??
Guest - Brett Shavers on Wednesday, 20 April 2016 20:51

Try something other then EnCase first. That is sometimes the easiest/fastest solution if it works..

0
Try something other then EnCase first. That is sometimes the easiest/fastest solution if it works..