log2timeline bitlocker recovery key issue

[Craig Sharp]

Hi all,

I don't see activity on this group, but I will give it a go.  I am working on my degree in Cybersecurity, and I have an assignment to image my laptop with FTK and then apply log2timeline against the E01 file for analysis.

My laptop uses bitlocker and log2timeline is asking me for the recovery key. I provided the recovery key and log2timeline is failing to unlock the drive. I know the key is good as I had an issue with the laptop some time ago and the recovery key unlocked it correctly.

Log2timeline seems to try to do the unlock, but keeps failing.

Any assistance would be greatly appreciated.

Thanks,

Craig

[Joachim Metz]

Plaso uses libbde have a look if that has a similar issue, you could be encountering an unsupported format edge cases, https://github.com/libyal/libbde/wiki/Troubleshooting

--
You received this message because you are subscribed to the Google Groups "log2timeline-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to log2timeline-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/log2timeline-discuss/eef3fbd0-8c43-4f70-ada0-12dabc9705ean%40googlegroups.com.