PC3K UDMA vs UFS Exploere Vs R-studio vs Any other Tool

[terminator2]

As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases
I don't own other 2 software but have PC3K .I have tried UDMA few times but it takes too much time & result was not so encouraging.
Other softwares like m3 bitlocker recovery or Hasleo are not pro type.
What is your opinion or experience ? Should I stick to UDMA only ?
Thanks

[melvin]

What do you mean by "takes too much time & result was not so encouraging"? If there's no partition info or beginning of drive is unrecoverable you check in RAW if there are any BL informations found in 30% and 60% of drive's LBA and use them if found. Data Extractor can help in those cases. Also it has a database with known keys so it helps with some cases where BL was turned on not by user.
That are two types of cases i use it for.

[terminator2]

What do you mean by "takes too much time & result was not so encouraging"? If there's no partition info or beginning of drive is unrecoverable you check in RAW if there are any BL informations found in 30% and 60% of drive's LBA and use them if found. Data Extractor can help in those cases. Also it has a database with known keys so it helps with some cases where BL was turned on not by user.
That are two types of cases i use it for.

Thanks .In previous cases both trial versions gave better results & speed than udma .In raw recovery also udma gave too many false positives.

[melvin]

In DE you just scan few milions LBA max to find BL info than use it as virtual drive. Takes few minutes max.
Maybe there's something you do different way.

Attachments

[pepe]

raw scan speed is affected by the amount of file types selected

[terminator2]

In DE you just scan few milions LBA max to find BL info than use it as virtual drive. Takes few minutes max.
Maybe there's something you do different way.

Thanks a lot melvin
Yes I was not doing like this , very much useful when bitlocker metadata is corrupted.

[terminator2]

raw scan speed is affected by the amount of file types selected

yes Thanks

[Alt(R-TT)]

As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases

You may test R-Studio working with BL in its demo mode, that is, for free. The Technician/T80+ version.

[terminator2]

As bitlocker cases are rising I would like to know your opinion on which is best software for Bitlocker corruption / Clear Key type encryption logical recoveries as well as Bitlocker recovery (password is known) cases

You may test R-Studio working with BL in its demo mode, that is, for free. The Technician/T80+ version.

Thanks .I was not aware of T80 version. This seems to be best software in terms of features / pricing etc.
I have a running case , I will try T80 version & if it serves my purpose will buy it immediately though I have R-studio license as well.

[terminator2]

While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.

[DR-Kiev]

While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.

Can you elaborate this ?
R-studi0 was better in fail ? How did you measure fail if nothing been recovered ?

[terminator2]

While none of the above was 100 % successful in recovering this case , R-studio was far better than much hyped UFS.
However something else worked well in giving justice to this case .
Gist of the story --not necessary that cost of the tool matters always for ultimate success.

Can you elaborate this ?
R-studi0 was better in fail ? How did you measure fail if nothing been recovered ?

Hi DR-Kiev
I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.

[northwind]

I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.

I kindly disagree with almost everything in this sentence

R-studio is a good tool and all, but UFS is very powerful and gives you a lot of freedom if you know what you're doing. To me, UFS is the best tool out there, hands down.
DE is very good with raw recovery. It also gives you good option to create/add more signatures easily. R-Studio also very good with raw.
DE (and UFS) has a very nifty way to add Bitlocker metadata to your search and create BL partition and extract data from them.

Apparently, you can't judge a tool from a failed recovery, unless one tool gives you good success with data and the other doesn't show anything. You need to compare many times, but you'll find out that all tools have pros and cons.
Currently, to me UFS has the most pros and least cons.

[terminator2]

I have got success with this case but all above mentioned tools couldn't give justice to the case (This often happens )
While UFS explorer didn't show anything R-studio showed partial data. Considering update frequency , pricing I am sure its best candidate to buy.
PC3K is not specific bitlocker solution as its primary role is for FW recoveries .I have never been able to recover anything logically from DE ,raw recovery is worst with DE.

I kindly disagree with almost everything in this sentence

R-studio is a good tool and all, but UFS is very powerful and gives you a lot of freedom if you know what you're doing. To me, UFS is the best tool out there, hands down.
DE is very good with raw recovery. It also gives you good option to create/add more signatures easily. R-Studio also very good with raw.
DE (and UFS) has a very nifty way to add Bitlocker metadata to your search and create BL partition and extract data from them.

Apparently, you can't judge a tool from a failed recovery, unless one tool gives you good success with data and the other doesn't show anything. You need to compare many times, but you'll find out that all tools have pros and cons.
Currently, to me UFS has the most pros and least cons.

Yes northwind
I agree ,I am unable to exploit full capabilities of PC3K for Bitlocker case. I have observed lots of false positives with DE in raw recovery cases. My opinion was based on my skill level , cost of tool etc.But trial version of R-studio has clearly recreated more data than UFS (approch of every tool is different and some tools work better for particular case)Where can I get more insight on how to recover bitlocker metadata & rebuild partition using DE
Thanks

[northwind]

I believe Ace has documented this in their DE manual, but from memory:
If you raw scan a BL drive and metadata is there, DE will find it. Then, right click > Add Virtual Partition.