Windows sees such disks as physical and Disk Management utility displays them correctly. It allows you to mount a disk image as a physical disk. Mount Image Pro showed very good results. But BitLocker To Go Reader showed an error and could not open the drive (shown in the screenshot below).įor Symantec Encryption Desktop and VeraCrypt, I got the same result as using FTK Imager. I was able to open the logical drive in Windows Explorer. Windows will not be able to see disk images mounted using OSFMount as physical disks.įor unknown reasons, the image of a disk encrypted with BitLocker could not be opened. If you choose a partition OSFMount will mount the specific partition like logical disk. If you choose "Use entire image file" in window “Select a partition in image” OSFMount will mount entire your disk image like logical disk. The program can only create a logical disk from your disk image. When mounting a disk image, OSFMount prompts you to choose whether to use entire image file or a specific partition (window “Select a partition in image” in the screenshot below). But OSFMount has problems with BitLocker. OSFMount showed about the same results as the FTK Imager. And I could not decrypt images of disks encrypted using Symantec Encryption Desktop and VeraCrypt using FTK Imager. Symantec Encryption Desktop and VeraCrypt could not access the data without accessing the disk as if it were physical. With other types of encrypted drives I was less fortunate. I was able to open the logical drive in Windows Explorer, decrypt and extract data using BitLocker To Go Reader. As a result, with the FTK Imager I could to mount only the logical disk of my disk image.įor BitLocker, this was not so bad. And the Disk Management utility did not display it. After disk image mounting FTK Imager showed in “Mapped Image List” that disk image was mounted like Physical and like Logical disks (shown in the screenshot below).īut Windows could not see the just mounted disk image as a physical disk. I set parameter “Mount Type” in “Physical Logical”. I began my experiments with an image of a disk encrypted using BitLocker. Symantec Encryption Desktop v 10.4.2HF1 (PGP WDE) įor my experiments, I will use the two most popular among forensics format disc images:įTK Imager showed not the best results.Disk Adapter For VMware Workstation (v 1.0) + VMware Workstation 15 Player.Īnd the following programs to create and open encrypted drives:.I will use the following programs in my research for mount disk images: In this article I will talk about some of the problems and specifics that you may encounter in the process of mounting images of encrypted disks. After disk image mounting you can work with data than saved on it. One of the most popular tasks for them is to mount disk images. Some of them work with images of encrypted disks. Many forensics and other experts work with disk images every day. Features of working with images of encrypted disks in Windows
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |