Mini-WinFE

Download/Links

Mini-WinFE GitHub repositories -

main Branch - forensic focus with a number of applications that could potentially perform disk writes removed.

WinFE Branch - includes more applications and options - use with caution as it is possible to use settings that will not write protect disks.

Project GitHub page -

1 - Branch button - use to toggle between main or WinPE branches.
2 - Code button - use to download the selected branch.

Detail when selecting the Branch button. Click on one of the listed branches (currently main or WinPE)-

Detail when selecting the Code button. Click on Download ZIP to download the selected Branch -

Alternative Download Link

The latest builds can be downloaded from the mistyprojects.co.uk site -

main branch
WinPE branch

Differences between Main and WinPE

The WinPE branch has some additions to the main branch. The following project scripts are included in WinPE -

Project\WinFE\Applications\Diskmgmt.script
Project\WinFE\Applications\JkDefrag.script
Project\WinFE\Applications\sDelete.script
Project\WinFE\Applications\Snapshot.script
Project\WinFE\Applications\Tinyhexer.script
Project\WinFE\FinaliseSubst.script

The following folders are included in the WinPE branch program cache (Projects\Cache\Programs\) -

\Bootsect
\Diskmgmt
\JKDefrag
\sDelete
\Tinyhexer

Differences in Project\WinFE\Finalise\winfe.script, which effectively force the use of forensic settings in the main branch as SANPolicy can only be set as 3 or 4, NoAutoMount cannot be disabled and DiskMgr/Protect.exe running at startup cannot be disabled -

WinPE branch (lines 24-32)

24 pScrollBox3=1,1,4,20,140,80,20,1,3,4
25 pTextLabel3="2] SAN Policy",1,1,213,140,90,18,8,Bold
26 pButton3=HELP,1,8,430,140,70,20,HELP.3,0,True,_HELP.3_,True
27 pBevel4=,1,12,10,190,500,40
28 pScrollBox4=,1,4,20,200,80,20,,ENABLED
29 pTextLabel4="3] NoAutoMount",1,1,205,200,117,21,8,Bold
30 pButton4=HELP,1,8,430,200,70,20,HELP.4,0,True,_HELP.4_,True
31 pBevel5=,1,12,10,250,500,40
32 pScrollBox5=NO,1,4,20,260,80,20,YES,NO

main branch (lines 24-32)

24 pScrollBox3=3,1,4,20,140,80,20,3,4
25 pTextLabel3="2] SAN Policy",1,1,213,140,90,18,8,Bold
26 pButton3=HELP,1,8,430,140,70,20,HELP.3,0,True,_HELP.3_,True
27 pBevel4=,1,12,10,190,500,40
28 pScrollBox4=ENABLED,1,4,20,200,80,20,ENABLED
29 pTextLabel4="3] NoAutoMount",1,1,205,200,117,21,8,Bold
30 pButton4=HELP,1,8,430,200,70,20,HELP.4,0,True,_HELP.4_,True
31 pBevel5=,1,12,10,250,500,40
32 pScrollBox5=YES,1,4,20,260,80,20,YES

Differences in Project\WinFE\Settings\Recommended.script, which removes BootSect from the main branch -

WinPE branch (lines 16-20)

16 pCheckBox1="1] BootSect",1,3,40,80,180,18,True
17 pCheckBox2="2] CMD Here",1,3,40,110,180,18,True
18 pCheckBox3="3] Keyboard Layout",1,3,40,140,180,18,True
19 pCheckBox4="4] ScreenRes",1,3,40,170,180,18,True
20 pButton1=?,1,8,10,80,18,18,?option1,0,True,_?option1_,True

main branch (lines 16-20)

16 //
17 pCheckBox2="2] CMD Here",1,3,40,110,180,18,True
18 pCheckBox3="3] Keyboard Layout",1,3,40,140,180,18,True
19 pCheckBox4="4] ScreenRes",1,3,40,170,180,18,True
20 //

Differences in Project\WinFE\Settings\wallpaper.script, which changes the default wallpaper -

WinPE branch (lines 25-27)

25 Filecopy,"%Cache%\Programs\Wallpaper\winpe.jpg","%TargetDir%\Programs\WinXShell\wallpaper.jpg"
26 End
27 Else,Filecopy,"%Cache%\Programs\Wallpaper\winpe.jpg","%Target_System32%\winpe.jpg"

main branch (lines 25-27)

25 Filecopy,"%Cache%\Programs\Wallpaper\winfe.jpg","%TargetDir%\Programs\WinXShell\wallpaper.jpg"
26 End
27 Else,Filecopy,"%Cache%\Programs\Wallpaper\winfe.jpg","%Target_System32%\winpe.jpg"

Document date - 9^th February 2023