Hard drive with an unknown file system
Hey guys, I got a hard drive in that we thought was BitLocker encrypted. However, when processing the image through AXIOM it never asked for the key. AXIOM was able to parse out some images and a few URLS. It also says it parsed out some Windows event logs but the name for the computer is list in a long string of Chinese characters. Axiom also stated it is a unknown file system. I am trying to find out what OS the hard drive has or if it could have been wiped. Any ideas?
You will definitely need to provide more information on this one. Screenshots of the hex/text, especially the boot sector, would be useful. Does there appear to be data across the drive? Does the data appear randomized, or do you recognize any data patterns (HTML code, plain text, etc.)?