Difference between pages "Whole Disk Encryption" and "TrueCrypt"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Redirecting to Full Disk Encryption)
 
(New page: '''TrueCrypt''' is a Windows program to create and mount virtual encrypted disks. == Forensic Acquisition == If you encounter a system that has a mounted TrueCrypt drive, it is imperati...)
 
Line 1: Line 1:
#REDIRECT [[Full Disk Encryption]]
+
'''TrueCrypt''' is a Windows program to create and mount virtual encrypted disks.
 +
 
 +
== Forensic Acquisition ==
 +
 
 +
If you encounter a system that has a mounted TrueCrypt drive, it is imperative that you capture the contents of the encrypted drive before shutting down the system. Once the system is shutdown, the contents will be inaccessible with an encryption key generated by a user's password and/or an additional datafile.
 +
 
 +
== External Links ==
 +
 
 +
* [http://www.truecrypt.org/ Official website]

Revision as of 15:45, 25 February 2007

TrueCrypt is a Windows program to create and mount virtual encrypted disks.

Forensic Acquisition

If you encounter a system that has a mounted TrueCrypt drive, it is imperative that you capture the contents of the encrypted drive before shutting down the system. Once the system is shutdown, the contents will be inaccessible with an encryption key generated by a user's password and/or an additional datafile.

External Links