±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34714
New Yesterday: 0 Visitors: 269

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 33 matches

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Sat Mar 24, 2018 6:47 pm

I have a vague idea that very little writing happened after the deletion date. I've gone over various times looking at the file dates and such. However I'm not sure of the depth of the file writing, i ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Fri Mar 23, 2018 10:22 pm

Jaclaz and 4144414D,

This week instead of jumping at everything, I paused a little to think about what I was doing. I went through the examples and made sure everything was working properly on my s ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Tue Mar 20, 2018 1:07 pm

Thanks yet again for your remarks jaclaz. For some reason I'd totally forgotten about DMDE. I'll work through your suggestions.
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Tue Mar 20, 2018 10:07 am

I'm running UNTRUE by decrypting a clean test 5mb truecrypt container that I know isn't corrupted, and still daemon tools can't open it, saying it might be corrupt. Plus, after decryption, the passwor ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Tue Mar 20, 2018 8:43 am

So yesterday I got back on with untrue, to do what I think is decrypt (untrue.exe -p password -i inputfile -o outputfile) and I don't know what to do with the resulting output file. It's just a file t ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Fri Mar 16, 2018 4:26 pm

[quote="4144414D"]
To be clear, have you seen hunt ever output a header? (In brute or chain mode) If you have then you have found the keys you need to decrypt the container. The whole process so far ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 

Re: Anyone got a bot to find deleted truecrypt container hea

Post Posted: Thu Mar 15, 2018 7:57 pm

[quote="jaclaz"][quote="loonaluna"]
Well I copied the hex values of the last part of the file into smaller and smaller sizes until I got a 4mb of the last data. Ran it through pytruecrypt and it didn ...
loonaluna
Topic: Anyone got a bot to find deleted truecrypt container header?
Replies: 41
Views: 8458
 
Page 1 of 5
Go to page 1, 2, 3, 4, 5  Next