Imagining an PointS...
 
Notifications
Clear all

Imagining an PointSec encrypted hard drive

11 Posts
8 Users
0 Reactions
1,935 Views
Chris_Ed
(@chris_ed)
Reputable Member
Joined: 16 years ago
Posts: 314
 

Just as a P.S to what everyone else has said

If you press CTRL+F10 at the pointsec logon screen and then log on as normal, you will be presented with a boot device selection screen. From here you should be able to choose to boot from a FDD, allowing you to use a forensically sound boot disc to start something like EnCase 5.05f for DOS and acquire the now-decrypted volume from there.

Obviously this is not an ideal method, but it is perhaps more sound than booting to the OS and doing a live acquisition. It's also a useful technique if you don't have access to the DMU or a Pointsec recovery disk.


   
ReplyQuote
Page 2 / 2
Share: