dll and then capture the registry change when it's registered. reg file and save as a PEBuilder/WinBuilder plugin.Į - Monitor the installation of a program and capture its registry entries and files to be saved as a plugin.į - Allows you to select an. Once around the block first, (see first pic):Ī - Resets the interface back to default ready for plugin creation.ī - Import a PEBuilder plugin or monitor installs from FileMon, InstallRite or InstallWatch which can then be saved as WinBuilder plugins.Ĭ - Batch conversion of PEBuilder plugins.ĭ - Import a. I think I'm going to have to pull out WinBuilder again to have a playįor this example we'll do something simple, (I won't test if it works in a PE afterwards because it'll need some tweaks), by creating a plugin of MyDefrag, you'll still get the general idea. it won't write anything to the system thus possibly corrupting evidence). Perhaps I should have said, "Make_PE3 is the simplest way to create a simple Live Win7 PE." Adding stuff to it will be a bit more involved, you're better off using WinBuilder and one of the Win7PE projects found here, it will be easier to add stuff to.Īddendum: Just found this: Windows Forensic Environment - a Windows PE designed for forensic analysis of the system, (ie. It's been about 10 months since I last played with making PEs but I still try to keep up with the latest methods - I'll probably swing to WinPE3 and update the various plugins I had. It's 3 years old but will generate BartPE and WinBuilder plugins. H7PluginBuilder makes plugin building reasonably easy, minor editing required afterwards to tweak them but better than trying from scratch. Probably a bit over the top but it was fun just to get it working.īut I also did PE2/3 multiple boot USB HDD/flash, directly adding the various wim files by editing the bcd file with bcdedit to add them in, as per: Integrating multiple version of Vista Six PE2 environments on the one flash drive. I used to create multiboot PE based USB flash drives with:ġ) WinBuilder - To create the PE environments, both LiveXP & VistaPE/7PE.Ģ) Various disk images - dban, ranish, supergrub, memtest, gag, ntpass, etc.Ħ) Windows apps - ImgBurn, hardware info, etc.Īll bundled up together using USB_Multiboot. VistaPE/Win7PE - If it's going to be used with esoteric hardware, (Vista/7 include storage drivers that will run on almost anything without trying to hack more in), and there's no RAM constraint. LiveXP - I'm more familiar with it and it's good for small size ISO, (fit on a 180MB CD with a few utilities), and RAM requirements are lower. I use WinBuilder to build PEs, (I used to use BartPE a lot in the past but WinBuilder is a lot easier), what type of PE depends on what I want it for.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |