±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35745
New Yesterday: 2 Visitors: 112

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 33 matches

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 20, 18 20:59

[quote="loonaluna"]so I did it on a backup of the 52gb container[/quote]

The screen from TrueCrypt you posted shows that it thinks the volume is 85899083776 bytes (about 86GB) so we're missing a lo ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 16, 18 23:35

[quote="loonaluna"]I have seen hunt output a header,[/quote]

Then we're done. Hunt has done its job, we have the keys. It's now up to us extract the container and recover some files. More tomorrow ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 16, 18 08:46

[quote="loonaluna"]So anyway, my apologies, I didn't read the instruction manual fully. The 80gb file supposedly discovered by this truecrypt backup header at the end of the drive was most probably en ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 14, 18 08:33

[quote="loonaluna"]If the drive the container was in, is an ecrypted truecrypt volume that to the best of myr recollection wasn't formatted (unless truecrypt formats it by default probably), will chai ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 13, 18 21:20

[quote="jaclaz"]That's exactly what I don't know/don't understand Sad and that has my "common sense" tingling Shocked .

I mean, no offense whatever intended Smile , but the probabilities that you found an ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 10, 18 11:51

[quote="loonaluna"]
When it does brute force it doesn't look for sectors -1,-2,-3, only when it's chain?
[/quote]

Brute force never does, the chain method looks around places where it thinks a he ...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Mar 08, 18 08:15

[quote="loonaluna"]Ah ok I misread the chain concept as something that differentiated suspiciously obscure space typical of truecrypt from typically boring text files with little entropy. [/quote]

...
4144414D
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 11464
 
Page 1 of 5
Page 1, 2, 3, 4, 5  Next