a software named POINTSEC FOR PC can protect computer harddrive. When boot from protected harddisk, the first thing is to put in username and password.
When I use Encase to view the harddisk , the partition seems to be unalocated cluster.
Is there anyone who can help me about this problem? thanks a lots
Good luck on this one. Pointsec uses pre-boot authentication to allow access to the drive. Then, all of the data on the device is encrypted. It is pretty secure and tough to crack.
I'd kick this one up to Guidance and see if they have a solution.
How are you examining the drive? Inside or outside of the box, and is it with EnCase preview, using Fastbloc or DOS boot disk? or have you acquired an image? Do you know the username and password?
Can you provide us with more info, it will help give a better picture of whats happening.
Andy
Have you tried contacting the PointSec vendor? They may be willing to assist legitimate requests, as some vendors are.
H. Carvey
"Windows Forensics and Incident Recovery"
a software named POINTSEC FOR PC can protect computer harddrive. When boot from protected harddisk, the first thing is to put in username and password.
When I use Encase to view the harddisk , the partition seems to be unalocated cluster.
Is there anyone who can help me about this problem? thanks a lots
If you don't have the boot password for PointSec, you are not going to be able to view anything. I was part of a review process on several different PointSec type programs and PointSec was the one I reviewed.