Difference between pages "TrueCrypt" and "Category:Anti-Forensics"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (Changed links)
 
(New page: Anti-Forensics related topics Category:Top-Level)
 
Line 1: Line 1:
'''TrueCrypt''' is a Windows program to create and mount virtual encrypted disks.
+
Anti-Forensics related topics
  
== Forensic Acquisition ==
+
[[Category:Top-Level]]
 
+
If you encounter a system that has a mounted TrueCrypt drive, it is imperative that you capture the contents of the encrypted drive before shutting down the system. Once the system is shutdown, the contents will be inaccessible with an encryption key generated by a user's password and/or an additional datafile.
+
 
+
==Attacks==
+
The only option for acquiring the content of a TrueCrypt drive is to do a brute-force password guessing attack. [[AccessData|AccessData's]] [[Password Recovery Toolkit]] and Distributed Network Attack ([[DNA]]) can both perform such an attack, but DNA is faster.
+
 
+
== External Links ==
+
 
+
* [http://www.truecrypt.org/ Official website]
+

Latest revision as of 18:24, 4 July 2008

Anti-Forensics related topics