Notifications
Clear all
17/05/2011 2:56 pm
Just as a P.S to what everyone else has said
If you press CTRL+F10 at the pointsec logon screen and then log on as normal, you will be presented with a boot device selection screen. From here you should be able to choose to boot from a FDD, allowing you to use a forensically sound boot disc to start something like EnCase 5.05f for DOS and acquire the now-decrypted volume from there.
Obviously this is not an ideal method, but it is perhaps more sound than booting to the OS and doing a live acquisition. It's also a useful technique if you don't have access to the DMU or a Pointsec recovery disk.
Page 2 / 2
Prev