±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 35636
New Yesterday: 8 Visitors: 151

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Bitlocker detection

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

hogfly
Senior Member
 

Bitlocker detection

Post Posted: Mar 17, 07 02:06

Given all the worries lately about Bitlocker changing things I decided to do a little exploration today and figured out how to detect it on a live system. I've blogged about it today and put a small sample piece of code up. If anyone wants to test it to see how it works, please do and let me know your results. It's really preliminary of course, but it proves one thing...all is not lost.  
 
  

_nik_
Senior Member
 

Re: Bitlocker detection

Post Posted: Mar 17, 07 02:53

here is a link to disk bit-locker detection:
blogs.msdn.com/si_team...ocker.aspx

It is also rumored that EnCase 6.3 with the EDS module supports BitLocker  
 
  

hogfly
Senior Member
 

Re: Bitlocker detection

Post Posted: Mar 17, 07 03:05

Ah, cool. I was wondering what it looks like on the disk.  
 

Page 1 of 1