±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36125
New Yesterday: 1 Visitors: 168

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Windows 8 Developer Preview build out

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

Chris_Ed
Senior Member
 

Windows 8 Developer Preview build out

Post Posted: Sep 15, 11 17:52

The Windows 8 Developer Preview is out in both 32 and 64-bit flavours. Grab it here, if you want:

http://msdn.microsoft.com/en-us/windows/home/

In related news, apparently it allows you to format volumes as an as-yet unannounced filesytem; "protogon".

http://www.neowin.net/news/windows-8-new-protogon-filesystem-could-be-the-next-big-thing

Can't download this at the moment as our office internet connection will probably die.

In any case, thought it may be of interest.  
 
  

dill
Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 15, 11 19:21

Hi Chris,

had a little play with it at the mo, but not at great lengh. What I can gather is that you can monitor files that are being renamed, deleted, copied, and to which location and when. However, the logs have to be stored another location other the original operating system partition. This can grow very large very quickly, so will probably have a time limitation involved (not verified yet). This is great as we can finally answer questions we couldn't before, however this setting isn't turned on by default and can't imagine many home user's using this feature. businesses might but to reduce the log file size, they'll probably limit the time to about a month.  
 
  

twjolson
Senior Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 16, 11 01:46

Yea, I tried formatting it from the command line, as they did, and it failed.

Anyone get it to work?  
 
  

jaclaz
Senior Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 16, 11 21:18

- twjolson
Yea, I tried formatting it from the command line, as they did, and it failed.

Anyone get it to work?


There is some mixup.

The Russian blog mentioned in the article made the test in August with a "Windows image 8 build 6.2.7955 x86." which is NOT the one that is currently in "preview", but rather a "leaked version".
It is very possible that in the preview the Protogon filesystem was removed.


jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

twjolson
Senior Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 16, 11 22:24

Ah, I read the posting as the Russian had successfully created a protogon file system.

I wonder how they disabled it and how/if we can get it back. It'd be nice to start research sooner rather than later.  
 
  

joakims
Senior Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 17, 11 02:32

At least 2 critical files are missing in the WDP;

Code:
api-ms-win-core-file-l1-1-1.dll
uprotogon.dll

I'm having a hard time with WDP and VMware, so can't verify.
_________________
Joakim Schicht

github.com/jschicht 
 
  

twjolson
Senior Member
 

Re: Windows 8 Developer Preview build out

Post Posted: Sep 17, 11 12:10

Yea, I couldn't get VMWare to work, but I got VirtualBox to. Even that took some tinkering with settings and several tries.  
 

Page 1 of 2
Page 1, 2  Next