Skip to main content

Download

FEX Triage 64 bit – Portable

Setup Instructions:

  1. Download and expand the ZIP file.
  2. Launch FEX Triage using the FEX_Triage_Launch.exe.

FEX Triage USB Boot ISO

GetData_WinPE_v6.iso (1172139280 bytes, 1.09gb)

  1. Download the ISO.
  2. Use Rufus (or similar) to write the ISO to a USB (USB 3.2 recommended).
  3. Move the unzipped FEX-Triage folder to the USB (either the root or the Programs folder).
  4. Boot the target system with the USB. WinFE Write Protect Tool will run.
    • Locate your boot USB in the WinFE GUI.
    • Set your boot USB to Read/Write. Mount your boot USB.
    • If you wish to search other logical drives on the target system, mount these drives (but leave them in Read Only mode).
    • Continue to exit WinFEX. Navigate to your boot USB and launch FEX_Triage_Launch.exe as administrator.

To customize your own boot USB, refer to this PEBackery build guide: GetData_FEX_Triage_WinPE_ISO_Guide.pdf

Product Details Purchase

Quick Links

FEX-Triage Change Log

15 Sep 2025 – FEX-Triage-64bit-(V3.10.13.6556C)

  • DLL Updates.


8 Sep 2025 – FEX-Triage-64bit-(V3.10.13.6556B)

  • Script Updates.


30 Apr 2025 – FEX-Triage-64bit-(V3.10.13.6064A)

  • Updated CLI engine.
  • Script maintenance – Removed device and file encryption check from all profiles (for speed purposed). Encrypted drives and files can be identified by running a specific profile.

30 Apr 2025 – FEX-Triage-64bit-(V3.10.13.6064A)

  • Improved identification of physical and logical drives.

20 Apr 2025 – FEX-Triage-64bit-(V3.10.13.6064A)

  • Fixed issue with profile for Windows System files export.
  • Added Timezone offset description.
  • Updated slide-bar color to green to better show active status.

14 Apr 2025 – FEX-Triage-64bit-(V3.10.11.6064A)

  • Improved speed of CSV Viewer in triage results window.

10 Apr 2025 – FEX-Triage-64bit-(V3.10.9.6064A)

  • Improved identification of BitLocker drives.


11 Mar 2025 – FEX-Triage-64bit-(V3.10.6.6064A)

  • Credentials – Fixed issue reading BitLocker passwords from input file.
  • CSV Viewer update.
  • Script maintenance.

14 Feb 2025 – FEX-Triage-64bit-(V3.10.4.5970A)

  • Improved license check.

7 Feb 2025 – FEX-Triage-64bit-(V3.10.2.5970A)

  • Release of v3 GUI.
  • Other general code updates.

9 Dec 2024 – FEX-Triage-64bit-(v3.0.0.5470C) – Download this build (last v2 GUI).

  • Fixed error with Yara match filter.

29 Aug 2024 – FEX-Triage-64bit-(v3.0.0.5470B)

  • Updated FEX Memory acquisition.

25 Aug 2024 – FEX-Triage-64bit-(v3.0.0.5470A)

  • Updates for new Phoenix USB boot.
  • Script updates.

8 Aug 2024 – FEX-Triage-64bit-(v3.0.0.5442A)

  • APFS updates.
  • Updated Regex component.

2 Aug 2024 – FEX-Triage-64bit-(v3.0.0.5432A)

  • Script maintenance.

21 Jun 2024 – FEX-Triage-64bit-(v3.0.0.5182A)

  • Script maintenance.

10 May 2024 – FEX-Triage-64bit-(v3.0.0.5140C)

  • Script maintenance.

10 May 2024 – FEX-Triage-64bit-(v3.0.0.5140B)

  • Updates to Graphics Analysis.

03 May 2024 – FEX-Triage-64bit-(v3.0.0.5090C)

  • Script Updates.

26 Apr 2024 – FEX-Triage-64bit-(v3.0.0.5090A)

  • New v3 GUI.
  • AI Graphics – Added profiles for: All, Drugs, Credit Card, CSAM, ID, Weapon.
  • Yara – Added profile for Yara rules.

12 Jan 2024 – FEX-Triage-64bit-(v2.6.0.4692A)

  • Updated Project Vic .JSON hash set match.

13 Nov 2023 – FEX-Triage-64bit-(v2.6.0.4070E)

  • Updated training hash sets.

11 Jul 2023 – FEX-Triage-64bit-(v2.6.0.4070D)

  • Internet Browser – Added summary results.
  • Script updates.

9 Apr 2023 – FEX-Triage-64bit-(v2.6.0.3676G)

  • Script updates.

26 Mar 2023 – FEX-Triage-64bit-(v2.6.0.3676E)

  • Basic > Advanced slide-bar now defaults to ‘All’.

23 Mar 2023 – FEX-Triage-64bit-(v2.6.0.3676D)

  • Added ZIP/RAR internal filenames to filename search.
  • General script updates.

11 Mar 2023 – FEX-Triage-64bit-(v2.6.0.3676C)

  • Added dll for Launch_Menu.exe
  • Update FEX-Imager.
  • User guide update.

8 Mar 2023 – FEX-Triage-64bit-(v2.6.0.3676A)

  • Script and TXML updates.

17 Feb 2023 – FEX-Triage-64bit-(v2.6.0.3584A)

  • Script and TXML updates.

3 Feb 2023 – FEX-Triage-64bit-(v2.6.0.3516A)

  • Add FEX_Menu. launcher for Triage, Imager, Memory programs.

27 Jan 2023 – FEX-Triage-64bit-(v2.6.0.3516A)

  • General script and filter updates.
  • Updated Codemeter.exe activation.

9 Jan 2023 – FEX-Triage-64bit-(v2.6.0.3468A)

  • JSON – Fixed issue populating Hash Match Category number.

13 Nov 2022 – FEX-Triage-64bit-(v2.6.0.3258A)

  • Update hashing engine for NSRL v3 support.

6 Aug 2022 – FEX-Triage-64bit-(v2.6.0.2898B)

  • ‘All’ is now the default group for profiles when FEX-Triage is first run.

26 Jul 2022 – FEX-Triage-64bit-(v2.6.0.2898A)

  • Updated artifact chat template.
  • Other minor engine updates.

12 May 2022 – FEX-Triage-64bit-(v2.6.0.2660C)

  • FEX Memory update with the FEX Triage zip file.

6 May 2022 – FEX-Triage-64bit-(v2.6.0.2660B)

  • Added ‘Content Type’ to Filename Search for profile lookup.

3 Feb 2022 – FEX-Triage-64bit-(v2.4.65.2488A)

  • Added Memory Acquisition (RAM capture) profile.
  • Updates for Bitlocker and APFS.
  • Update to identification of encrypted files.
  • General updates in line with FEX GUI (see the FEX GUI change log).