ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.
TrueCrypt is a Windows program to create and mount virtual encrypted disks.
If you encounter a system that has a mounted TrueCrypt drive, it is imperative that you capture the contents of the encrypted drive before shutting down the system. Once the system is shutdown, the contents will be inaccessible with an encryption key generated by a user's password and/or an additional datafile.
The only option for acquiring the content of a TrueCrypt drive is to do a brute-force password guessing attack. Both PRTK and DNA can attack the program.