Teamviewer

Hi Chris,

I am looking to create a winfe style boot cd, so far I have been able through some posts of your and some others to figure out how to create a disc with Winbuilder but for the life of me I cannot add Teamviewer (or any other app for that matter) to the cd. I have no back ground in this and am trying to understand how it all works, I am a forensic investigator and use other vendor supplied boot discs and wanted to build my own. can you help me?? I dont even know what to ask.. but again the bottom line is I need a cd with write protect, teamviewer and preferably EnCase imager or FTK image. would love to eventually have other apps but that is not initially important.

thank you so much,

James

Hi James,

If you are wanting to use Win7PE SE, then you can download it from here: http://w7pese.cwcodes.net/Compressed/

When you unpack the archive and start the builder, you will need to supply a Win7 source to then build your PE. There are some apps as part of the download, which you can enable in the builder tree.

Regards,
Galapo.

thank you for the reply, I am an extreme novice so I apologize. I can use the projects to create a default build and I even got so far as to be able to add teamviewer to portable appson my computer but not to the build. once I run the play button it loads and portable apps opens but there is nothing in it??? sorry I dont seem to understand how the build process works and I have no experience with winbuilder prior to this attempt.

James

We have TeamViewer plugin ready to use
http://theoven.org/index.php?topic=588.0

as well as many other plugins you can find at Yomi and Gena (~300 apps plugins I gues)
http://theoven.org/index.php?topic=175.0

ps: you can download Gena apps same way descibed on Yomi topic, and get into the project by "Win7PE SE\Share Scripts"

Always use available plugins of applications if they exists, since plugins not only add files but also do other related stuff..

for other portable apps that we do not have ready plugins,
use
\Utils\"PC Packed"
to create your plugins

I guess this helps you to add apps to your builds

Thank you Lancelot,

I will give that a try, this is all new to me so I hope I can figure it out...:)

thanks again,

James

Thanks  it worked,,,,,you are a rockstar.

4n6pi - While I wrestle with my own problems, here's something for you....

As a fellow forensics examiner and WinBuilder noob, I built a real simple script for FTK-Lite. This avoids any issues with installers (eg: FTK (full) or enCase tools).

- From Tools button, top right, go to 'Create Script' tab
- Pick a folder for FTK to live in (I went for Apps | HD Tasks)
- In the right-hand pane, edit title, description etc. Mine reads:
     [main]
     Title=FTK Imager Lite
     Description=FTK Imager Lite
     Selected=True
     Level=5
     Version=1

     [variables]
     %ProgramTitle%=FTK Imager Lite
     %ProgramEXE%=FTK Imager.exe
     %ProgramFolder%=HD Tasks

- Unzip the FTK-Lite package, then in the script editor "Add Files" tab, just point it at the extracted files.
- Back on the Script tab, give it a name, and hit 'Create'. With a click of the 'Refresh' button it should be there in your project
(NB: You may need to go into Winbuilder 'Options' to enable the 'refresh' button!)

If you use FTK in conjunction with WinFE, it appears to work just fine. However the caveats surrounding WinFE, and how the read-only status of drives can be modified in a PE environment without your knowledge by certain low-level tools (Disk Management etc) should be kept in mind. It may be worth a back-to-back physical disk image comparison with something produced by, say, a Tableau device.

Thanks for the help!! I will try it, hope it works for me,,,, I wish I could pay someone to make my cd for me  I have wasted more time on this than I care to admit.....

Hi MisterC,

the procedure you develop have troubles, I strickly advice you to avoid

troubles:
does not provide run from options
cause plugin too big -> which cause slow down on process (wb bug)
requires too many steps and menus
requires many user input to add standart options (like run from and popular shortcuts) --> which cause none standart (but sure working) plugins that cause harder to maintain ( update + fix )


that is the reason Utils\"PC Packed" created   
with 3 steps (2+Gooo button) you get plugin ready 

Try using
Utils\"PC Packed"

I am sure you can make hundereds of plugins much more easly like FTK-Lite or any other similars .... 

Thanks for all the advice, Lancelot will that work with .exe files? my main goal is to get EnCase imager along with Teamviewer (which now works) working with this boot disc so I can send it to the client have them boot to it then I log in and create the forensic image with EnCAse..... simple as that.

Thanks for all the advice, Lancelot will that work with .exe files?

Better you ask quetions AFTER you practiced with "PC Packed" 


*
For your task,
Assuming your client would have enough RAM to run your "forensic"   cd,
 I recomend using Run All from Ram option, which would ease your remote access and trials on remote connections..  (test and see sizes ... )

Also, better you also use available AA plugin as I introduced earlier, sometimes TeamViewer don't work (connection troubles or port troubles..) but AA works, vice versa... better have all options at hand 

*
EnCASE forensic, well I believe "forensic" word became new fancy word for couple of years 

You can use free alternatives (you find some of them available with ready plugins as instructed earlier)  if you want to create image, or if you like with payed ones ilke EnCASE, up to you 

Thanks Lancelot, I am an EnCase partner and EnCE so I kinda need to use GuidanceSoftware products I will look at AA as you mentioned and run tests using RAM. I appreciate all of your replies very much.

thank you

James

Lancelot,

I was able to use the PC pack util and create my first script that allows EnCase Forensic Imager to run same as FTK imager. It works for me just fine. How can I share the script is my first question and my second is can you look at it to be sure it will work for others if you have a chance?

thanks,

4n6PI

You can share your plugins on a topic around here
http://theoven.org/index.php?board=31.0

Just be sure your utility license  (on current case FTK imager) allows "distribution"  , Freeware does not mean free distribution 

Well, share as long as you test, in time there may be advices on coding if required and/or freetime

See You

  I will check that thanks, if free distro I will share... have a great weekend

Just another tip:

If not distributable,
and
If you put a lot work on your plugin utility (registry findings, dependencies etc. etc. )
 that you feel deserves sharing,
  just share plugin by detaching utility 

There are always solutions as long as there are good wills 

See you

ok, I will thx