LTO 4 Backup Decryp...
 
Notifications
Clear all

LTO 4 Backup Decrypt

5 Posts
5 Users
0 Reactions
621 Views
(@gk-forensics)
Active Member
Joined: 14 years ago
Posts: 6
Topic starter  

Hi all,

I have 3backup tapes [ IBM LTO 4]. They are all from the same backup. I do not have the server either no info about the type of the software backup or the encryption key.
I would like to know if you have any idea about any data recovery process or lab which is capable of doing this process which is to decrypt the data and recover it?

THX


   
Quote
(@mscotgrove)
Prominent Member
Joined: 17 years ago
Posts: 940
 

If you don't know anything about the backup type (there are many different types) how do you know they are encrypted? It could be possible they are just compressed.


   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

I have had excellent results working with RenewData (https://www.renewdata.com/solutions-services/tape-services/) when my cases involve backup tapes.

I have not worked with them personally, but hear good things about Index Engines (http//www.indexengines.com/).


   
ReplyQuote
(@auseforensic)
New Member
Joined: 15 years ago
Posts: 3
 

Index Engines does work well and is quite sophisticated.

One of the simpler things you can do in the first instance is use your favourite version of U**x or L***x with an LTO4 tape drive connected to view the first few blocks of the tape using DD. I have found this useful in identifying, in clear text the software and version used to create the backup.


   
ReplyQuote
PaulSanderson
(@paulsanderson)
Honorable Member
Joined: 19 years ago
Posts: 651
 

Dump the first couple of blocks with dd and post them here (or email to me) paul@sandersonforensics.com and i'll see if I can let you know what format it is.

paul@sandersonforensics.com


   
ReplyQuote
Share: