Enables the Enhanced Write Filter so that data written to the protected media is cached in the overlays. The current overlay level becomes 1 as soon as EWF is started, and a new overlay is created at level 1.

●-commitanddisable

Commits data in the overlay upon shutdown and disables EWF after the system reboots.

●-description

Use with -setlevel or -checkpoint to add a description for the overlay level that is being stopped.

●-gauge

Displays a percent full gauge for the EWF volume. “X” is a number from 1 to 100 and indicates the gauge stepping value. (The default stepping value is 1.)

Using the Enhanced Write Filter (EWF) command line control utility 15