Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Can the software decrypt a BitLocker or TrueCrypt drive that was not mounted when the memory image was acquired?

April 26, 2017acquired BitLocker decrypt drive image memory mounted Software TrueCrypt

0

10 Posted

Can the software decrypt a BitLocker or TrueCrypt drive that was not mounted when the memory image was acquired?

1 Answer

0

10 Posted

Yes. If a memory image does not contain encryption keys required for instant decryption of a TrueCrypt volume, Passware Kit assigns a Brute-force attack to recover the original password. We are planning to add Brute-force password recovery for BitLocker volumes in future versions of the software.