troubleshooting Question

Encase and encryption

Avatar of Pau Lo
Pau Lo asked on
SecurityEncryptionDigital Forensics
3 Comments1 Solution3752 ViewsLast Modified:
1) A couple of questions, is there any master list of what full disc encryption products the latest version of encase forensics "supports"?

2) What is the defintion in laymans management speak of support, i.e. if our security team get a PC in and find the drive is encrypted, how does the encase support kick in. For example if you just image that drive (never done this but seen one guy do it, it seems they attach it to a write blocker, file > add device > local device) and pick the neccesary drive, and then "acquire". But arent you just imaging then a drive of encrypted non human readable data, how does the encase support "decrypt" that drive so the image you acquire can be analyzed?
ASKER CERTIFIED SOLUTION
SirtenKen

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros