Notifications
Clear all
Topic starter
14/04/2009 3:57 am
I'm trying to restore/recover images off a MAC hard drives (HFS+) which were encrypted using the PGP Whole Disk encryption. I've tried VMWare Plus Physical Disk Emulator through EnCase but VMWare doesn't support HFS virtual machines. I've tried using EnCase's new feature that supports PGP Whole Disk but it doesn't support HFS until 6.14. Now I'm trying to restore the evidence to a disk and introducing that restored disk into a MAC environment. I'm hoping that with the use of PGP Desktop, the Master Key and the password I'll be able to unencrypt the files.
If anyone out there has done this before or has a different perspective I'd love to hear your thoughts. Thank you in advance.