Oct. 25, 2023, 5:29 p.m. | /u/rocksuperstar42069

Computer Forensics www.reddit.com

Is there a simple tool, preferably FOSS, that will just take in a ClearKey Bitlocker Ex01, E01, or DD image and just spit out a decrypted version of the image?

Axiom, Passware, and EnCase can all do this, but I'm looking for a simple tool that I can just point at the image and it will spit out a new E01 that is decrypted.

AIM's cli/gui is as close as I've found. It will do this for regular Bitlocker images …

axiom bitlocker computerforensics foss image passware point simple tool version

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Cybersecurity Engineer

@ Booz Allen Hamilton | USA, VA, Arlington (1550 Crystal Dr Suite 300) non-client

Invoice Compliance Reviewer

@ AC Disaster Consulting | Fort Myers, Florida, United States - Remote

Technical Program Manager II - Compliance

@ Microsoft | Redmond, Washington, United States

Head of U.S. Threat Intelligence / Senior Manager for Threat Intelligence

@ Moonshot | Washington, District of Columbia, United States

Customer Engineer, Security, Public Sector

@ Google | Virginia, USA; Illinois, USA