Is there a way to find the boundries of a BitLocker volume when the partition tables are damaged?

[Fraser Corrance]

Hello all!

I have an SSD here that is only showing one small 16 MG partition labeled as Microsoft Reserved Partition and the rest of the drive as empty space. I tried scanning the drive for lost partitions but what it came up was the wrong size and could not be decrypted using the password or the BitLocker key. 

Is there a way to find the beginning and end of the Bitlocker volume? I was thinking of trying to create a region in R-studio and see if I can decrypt it.

Unless anybody else has a better way to approach this one. 

Cheers, 

Fraser

[Chris Berge]

Hey Fraser,

Good to hear from you! See if you can search for the metadata block signature. 

Chris Berge - Owner

Neuralearth LLC

Managed IT & Cybersecurity Services

503-683-3801

6950 SW Hampton ST STE 214

Tigard, OR 97223

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/17afdb2d-f66d-46a8-9978-0f0a24d6d554n%40googlegroups.com.

[t...@desertdatarecovery.com]

What does hex look like across the drive? You may find if its been reformatted TRIIM may have destroyed/removed the data.

 

You can try M3 to scan the drive and see if it finds Bitlocker fragments.

https://www.m3datarecovery.com/bitlocker-recovery/bitlocker-data-recovery.html

but I have had only sporadic success with it.

 

Tim Homer - Lead Engineer

Desert Data Recovery

t...@desertdatarecovery.com

www.desertdatarecovery.com

 

From: datarecovery...@googlegroups.com <datarecovery...@googlegroups.com> On Behalf Of Chris Berge
Sent: Monday, November 8, 2021 9:17 PM
To: datarecovery...@googlegroups.com
Subject: Re: Is there a way to find the boundries of a BitLocker volume when the partition tables are damaged?

 

Hey Fraser,

 

Good to hear from you! See if you can search for the metadata block signature. 

 

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAMR4GpRb6QXkbkYrMuWc0yXMprbK%3Dxc9RbDBWUWNzUhvHx-row%40mail.gmail.com.