DETech PE refers to WinPE, versions 3, 4, 5, and 6. DETech can be run in Standalone mode or as a Windows application. The DETech Windows application can be run from PE environments. This provides an environment that is similar to Windows and allows the administrator to recover data without having to fully decrypt the disk.
Licensing requirements dictate that you must build these tools yourself from your licensed copy of Windows, because license restrictions prevent Trellix from distributing the necessary Windows components.
It is entirely the responsibility of the qualified system administrators and security managers to take appropriate precautions while using the DETech (WinPE V3, V4, V5, and V6) recovery tool. DETech provides very low level control of the disk, and administrative error when using this tool can result in a loss of data. We recommend that only experienced administrators work with DETech.
Caution
Make sure that you do not restart the client system when DETech is decrypting the disk while running from a PE environment. For more information, see KB74056.
Note
A Trellix tool is available to allow automated creation of Win PE 3.x and higher. This tool enables injection of files and addition of registry items into the WinPE image. For more information, see KB79853.