ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

TrueCrypt

From ForensicsWiki
Revision as of 20:45, 25 February 2007 by Jessek (Talk | contribs) (New page: '''TrueCrypt''' is a Windows program to create and mount virtual encrypted disks. == Forensic Acquisition == If you encounter a system that has a mounted TrueCrypt drive, it is imperati...)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

TrueCrypt is a Windows program to create and mount virtual encrypted disks.

Forensic Acquisition

If you encounter a system that has a mounted TrueCrypt drive, it is imperative that you capture the contents of the encrypted drive before shutting down the system. Once the system is shutdown, the contents will be inaccessible with an encryption key generated by a user's password and/or an additional datafile.

External Links