April 25, 2022, 12:05 p.m. | /u/kaibring

Computer Forensics www.reddit.com

Hi,

i got 2 Bitlocker encrypted drives on whom Bitlocker itselves is disabled so that there must be a Clear Key stored on the drive. I can access the Data with Magnet Axiom, witch autodiscovered the Key, but I want to run some other examinations with other tools on it. So my question is does anybody know where exactly the Clear Key is stored?

Thanks for any help

bitlocker computerforensics key

Junior Cybersecurity Analyst - 3346195

@ TCG | 725 17th St NW, Washington, DC, USA

Cyber Intelligence, Senior Advisor

@ Peraton | Chantilly, VA, United States

Consultant Cybersécurité H/F - Innovative Tech

@ Devoteam | Marseille, France

Manager, Internal Audit (GIA Cyber)

@ Standard Bank Group | Johannesburg, South Africa

Staff DevSecOps Engineer

@ Raft | San Antonio, TX (Local Remote)

Domain Leader Cybersecurity

@ Alstom | Bengaluru, KA, IN