Not to get into the long history of WinFE, but rather focus on the course I created about 2 years ago…it’s time for an update to the course. There have been almost 5,000 people that signed up for the online WinFE course since 2014. WinFE has been taught everywhere since its inception, from colleges to federal forensic courses to everything in between.
Technology changes and with that, WinFE needs to be updated along with a second related topic to be included in the course. In the next few weeks, I am updating the WinFE course and adding Linux distros to the mix (only the most current Linux forensic distros, not the outdated and non-maintained systems). The new course is tentatively titled,
"Bootable Forensic Operating Systems"
or something to that affect of having both Windows and Linux forensic boot systems.
The intention of this new course is the same as the previous course: Give forensic analysts additional options in collection, preview/triage, and analysis....