COMPUTER AND NETWORK FORENSICS(SHOULD NOT BE SAME AS IN GOOGLE ...SHOULD BE PLAG

Question

COMPUTER AND NETWORK FORENSICS(SHOULD NOT BE SAME AS IN GOOGLE ...SHOULD BE PLAGARISM FREE ANSWER)

1. Windows is still the most popular/common operating system for home computers as well as corporate workstations. As such, you are far more likely to be performing forensic investigations on a Windows machine than on anything else.

This week's question is a simple one: Keeping in mind the differences between different versions of Windows (home, professional/enterprise, etc), what are your thoughts on BitLocker? How do you see it impacting forensics investigations, and what can be done?

Explanation / Answer

Answer:

The BitLocker technology developed by Microsoft Corporation to protects the data on the hard drive.

It protects the data by providing encryption to the desired volume on the hard disk.

The BitLocker technology came into access from later versions of Windows vista.

It is very useful in protecting the information of the users.

The perspective of forensic investigators is different when they look at BitLocker, because, BitLocker software is an added advantage to the cyber criminals in early days of its release.

The forensic people were not able to recover the data from the systems with the BitLocker technology after the cyber-crime, so it impacted a lot in the initial days.

Later there were many ways discovered to crack the BitLocker and recover the data.

Even there are some software’s like Elcomsoft Forensic disk Decryptor to bypass the BitLocker.

There are many brute force techniques to crack the BitLocker.

There are numerous procedures and method to bypass BitLocker due to technology advancements. Hence it does not have any impact on forensic investigations.

Related Questions

Navigate

• Browse (All)
• Browse C
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.