Enables the Enhanced Write Filter so that data written to the protected media is cached in the
overlays. The current overlay level becomes 1 as soon as EWF is started, and a new overlay is
created at level 1.
●
-commitanddisable
Commits data in the overlay upon shutdown and disables EWF after the system reboots.
●
-description
Use with -setlevel or -checkpoint to add a description for the overlay level that is being stopped.
●
-gauge
Displays a percent full gauge for the EWF volume. “X” is a number from 1 to 100 and indicates the
gauge stepping value. (The default stepping value is 1.)
Using the Enhanced Write Filter (EWF) command line control utility
15
