Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
December 18th, 2014, 0:14
The hard disk is encrypted with Bitlocker 2.0 (Windows 7)
This is a laptop hard disk from an ex employee, passed to me by HR of the company. The HR and no else in the company has no information on bitlocker password or recovery key.
Just checking anyone come across possibility to recover data from bitlocker encrypted disk without password or recovery key?
December 18th, 2014, 2:13
I think it's easier to send legal letter to the employee or bring him to the court and force him to hand over the password
December 18th, 2014, 5:55
I think this will help you
http://www.elcomsoft.com/efdd.htmlIf user doesn't remember the password you can still TrueCrypt volume to access data.
You can use "Elcomsoft Forensic Disk Decryptor" to decrypt
December 19th, 2014, 3:32
ROb wrote:I think this will help you
http://www.elcomsoft.com/efdd.htmlIf user doesn't remember the password you can still TrueCrypt volume to access data.
You can use "Elcomsoft Forensic Disk Decryptor" to decrypt
That is true and you need a GPU station...
October 10th, 2015, 10:34
ROb wrote:I think this will help you
http://www.elcomsoft.com/efdd.htmlIf user doesn't remember the password you can still TrueCrypt volume to access data.
You can use "Elcomsoft Forensic Disk Decryptor" to decrypt
Hello Rob ,
Do You Have Personal Experience With The Tool
October 12th, 2015, 11:57
ROb wrote:You can use "Elcomsoft Forensic Disk Decryptor" to decrypt
But encryption keys still needed. The software just allows to acquire them from unusual sources like PC memory when encrypted volume is already mounted or from hibernation file.
October 12th, 2015, 12:26
Bitlocker is doing the job it was designed for. I presume the hibernation file is stored on the windows partition so no way of recovering it if the laptop has been powered off as it is now encrypted.
Powered by phpBB © phpBB Group.