You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I am trying to mount a BitLocker partition after having mounted the disk image with ewfmount. When I enter the known recovery key to either bdeinfo or bdemount with -r <recovery-key>, I am prompted to enter the volume Password (which is not known).
I am using current versions of ewftools and bdetools built from source:
I ran bdemount again with debug+verbose output enabled. The bde metadata has a few references to 'SophosProtector', so that may be the cause of my issue.
I am trying to mount a BitLocker partition after having mounted the disk image with ewfmount. When I enter the known recovery key to either
bdeinfo
orbdemount
with-r <recovery-key>
, I am prompted to enter the volume Password (which is not known).I am using current versions of ewftools and bdetools built from source:
Here is some of the image metadata:
Files & Mounts
Partition Layout
* curious, those Chinese characters... not sure I've ever seen that before from Sleuthkit
BitLocker Volume Info
I don't recall ever trying to use
bdemount
on a volume that has both of these protectors enabled.Am I missing something? Some compile option needed that I'm missing?
Thanks,
-Tommy
The text was updated successfully, but these errors were encountered: