Notifications
Clear all

Bitlocker

12 Posts
7 Users
0 Reactions
5,346 Views
(@columbuscop2290)
New Member
Joined: 10 years ago
Posts: 4
 

@minime2k9 I’m curious if you have a write up on this method? I’ve never seen it before and would be interested in giving it a try


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

@Columbuscop2290 - Never actually written it up properly, the hardest part is creating a Windows2go usb, though this is a pretty good write up:

https://www.techspot.com/article/1751-windows-to-go/

I think you do need a copy of Windows 10 Pro as opposed to home to be able to do this. 

Once you have a machine booted, its basically just entering the manage-bde command. This will give you the recovery key for the mounted drive. It only works where a password is not required (unless you have the password too).

If you think about it logically, we are still running a completely legitimate version of Windows (i.e. Secure boot compliant) and therefore the TPM data will be available to us.

I used this technique first when I managed to erase a partition from a bitlocker encrypted disk (on a non-evidence device!!) 


   
ReplyQuote
Page 2 / 2
Share: