I am examining a USB drive that has encrypted files using SanDisk SecureAccess Vault (Version 2.0). Has anyone successfully bypassed this encryption or dealt with this before?
I found this method to bypass on this site https://
The only issue I have with this method is how to alter the serial number on the USB to match the suspect's USB drive. Does anyone have any suggestions? Thanks in advance for any suggestions.
Ryan Enfantino
Atascadero Police
The only issue I have with this method is how to alter the serial number on the USB to match the suspect's USB drive. Does anyone have any suggestions? Thanks in advance for any suggestions.
It depends.
Most (but not SANDISK) USB sticks are "generic" and use one among a small number of controllers and a "standard" board.
For most of these "generic" USB sticks there is a "Manufacturer's Tool" that is capable (among other things) to change the VID and PID and the serial (as many "brand" names use these "generic" sticks but change the VID and PID to their own one and use their own specific serial numbers).
Go here (use Google Translate, Russian)
https://
and learn how
1) identify the stick controller
2) get the "right" Manufacturet's Tools
3) change whatever you need to change
Please understand how the resources are limited, as most of this tools are "leaked" or anyway little (or not at all) documented and the available files may be "older" versions that do not work on latest-latst USB stick you buy new.
The right approach is to get a few USB sticks of the "right" capacity, various brands and models and analyze them until you find one that is surely identified and for which the Manufacturer Tool capable of changing VID/PID/serial is available and it is simple enough to be used with available instructions.
From experience, the Alcor ones are easy to modify, next best is Phison (but some models are more complex).
jaclaz