achical Posted October 8, 2012 Share Posted October 8, 2012 Hi guys!!im doing a working in the it-forensic area and i would like any help with this question.'suppose u have a hardisk where one of the partition is encrypted with Truecrypt 5.1a and is hidden as wellu know the key as 16 characteres AES 256 bit.how would u find this hidden partition and how would collect data from it?which tools you think can work better in this caseremember the laptop is runnig Win7 home premiumany ideas here guysthanks for your time Link to comment Share on other sites More sharing options...
jaclaz Posted October 9, 2012 Share Posted October 9, 2012 Hi guys!!im doing a working in the it-forensic area and i would like any help with this question.'suppose u have a hardisk where one of the partition is encrypted with Truecrypt 5.1a and is hidden as wellu know the key as 16 characteres AES 256 bit.how would u find this hidden partition and how would collect data from it?which tools you think can work better in this caseremember the laptop is runnig Win7 home premiumany ideas here guysthanks for your timeI don't get it. Are you sure you do work in digital forensics? You are not serious about doing the work from the booted laptop, don't you? You IMAGE (forensic sound image) the disk first thing, then working on the IMAGE or on a CLONE of it:You find hidden partition in the MBR and/or EPBR's, then you unhide it, and if you have the key you unencrypt it.If you have not the key, then you need to "crack" it.You will need some dedicated GPU(s) and a lot of patience (and a bit of luck).jaclaz Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now