Windows Forensics (Win-FOR) Customizer
The design behind this is to use a barebones Windows 10 VM or a Windows machine (preferably 1909 and higher to support WSLv2). Once configured, and activated (to support customization features), then you can use one of the installers to install all of the packages.
The installer is a graphical interface to click and choose which items you want, and to enter the settings you need
Check out the Releases section for the most up-to-date installers.
FIRST OFF - Requires .NET 8.0 Desktop Runtime If you do not have it, you will be prompted to install at execution
Why a GUI? Who doesn't like a good GUI!? Not everyone enjoys Windows command line or PowerShell, especially when just starting out in Digital Forensics. This makes it much easier to get your environment set up without having to worry about CMD or PS!
The customizer tool gives you the following features:
- Point and click to choose which tools you want installed in your distro (instead of just choosing them all)
- Checkboxes to choose if you want the WSLv2 with SIFT and REMnux installed during the process, or click
WSL Onlyto install it at a later date - Save your current selections in a custom SaltStack State file for your own purposes or record
- Identify the current version of the Win-FOR environment with a single click
- Check for updates to the Customizer
- Graphically enter any settings you need!
Due to recent changes in the Saltstack infrastructure more information found here, Win-FOR Customizer had to be updated to the latest SaltStack and drop support for v3005.
All issues should be raised here