Forums
Main Category
General (Technical,...
Safend Decryption &...
 
Notifications
Clear all

Safend Decryption & Forensic Acquisition

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by markfu14 13 years ago
3 Posts
3 Users
0 Reactions
652 Views
RSS
 MrSteve
(@mrsteve)
Active Member
Joined: 17 years ago
Posts: 6
Topic starter 28/02/2013 11:47 pm   [#10334]

We have encountered a laptop that is running Safend Encryption (http//www.wave.com/products/safend-encryptor). After we forensically imaged the hard drive It appears that the user files are encrypted within the image, and we are trying to determine if anyone in the community has dealt with or know any methods that support the decryption of this product? We have the ability to apply a recovery key, but we are trying to determine if this can be done from within forensic software.

Thanks very much in advance!

Steve



   
Quote
 pragmatopian
(@pragmatopian)
Estimable Member
Joined: 17 years ago
Posts: 154
01/03/2013 3:20 pm  

To my knowledge decryption of Safend on the fly isn't supported by the Forensic suites. You'll need to use the recovery tools and the relevant credentials to gain access.



   
ReplyQuote
markfu14
 markfu14
(@markfu14)
Eminent Member
Joined: 21 years ago
Posts: 14
26/03/2013 3:53 am  

Did you perform a physical image or try to image it logically?



   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: