Timing of FBWF and/or EWF
-
Friday, January 25, 2013 9:36 PMOnce they are activated and the PC rebooted, what is the timing on the write filters? From the moment power is applied to the PC to the moment that they are fully protecting the volumes, how much time is there in between that could potentially used to alter data on the volume (SSD, CF and/or HD)? Is there any control over these times that can be configured?
All Replies
-
Friday, January 25, 2013 10:29 PMboth are drivers. so while bootin (bootlogo stage) the filter gets activated.
Windows Embedded Developer and Scripting Guy //Germany (Preparing a blog about Windows Embedded Standard)
-
Monday, January 28, 2013 3:29 PMSo is that to say that from the time the BIOS screen is displayed to the time that the boot logo is displayed is when there is a (potential) vulnerability?
-
Monday, January 28, 2013 4:10 PM
rootkits, other bootloaders anything before windows gets loaded.
Windows Embedded Developer and Scripting Guy //Germany (Preparing a blog about Windows Embedded Standard)
-
Monday, January 28, 2013 5:01 PMYes I know how it could happen. What I want to find out for certain is the timing. Is what I said about the time from BIOS/Power up->Bootlogo display correct?
