Recent content by mjpetersen

  1. M

    FMEM and DD segmentation fault

    Did you sudo to root?
  2. M

    FTK Imager Windows 10 with bitlocker

    Another method you could try is by connecting the drive to your forensic system using a write blocker, and open a command prompt and enter the following: manage-bde -unlock I: -RecoveryPassword ######-######-######-######-###### Where the I drive is the drive to be unlocked and the ### is the...
  3. M

    FTK Imager Windows 10 with bitlocker

    Really depends on how you made the image. If you selected to make the physical image, you should be good, however if you made the logical image, you may have issue. I use May, because until you see the device, you won't know, I have had Imager report a good image, but did not give me the logical...
  4. M

    FTK Imager Windows 10 with bitlocker

    FTK Imager will not be able to decrypt the image. In order to see the partition, you will need the forensic suite. AD Enterprise, Lab etc., Encase 8, or XWays will start to look at the drive and let you know you will need the password to proceed in the process. The image you have will work...

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu