libyal / libbde

Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes
GNU Lesser General Public License v3.0
214 stars 52 forks source link

How do I use bdeinfo on a Windows volume? #45

Closed xufuda closed 4 years ago

xufuda commented 5 years ago

Device G has been encrypted with BitLocker,so i use dos commands “bdeinfo -p binarydataleo.(bitlocker password) G:” in windows 10 system,but report an error: "Unable to open: G:. libcfile_file_open_with_error_code: unable to open file: G: with error: BitLocker". Is there any help documentation with bdeinfo and bdemount? Thanks!!!

joachimmetz commented 5 years ago

there are man pages, and wiki https://github.com/libyal/libbde/wiki/Mounting

but on Windows G: is a drive letter and NOT a device file path try \\.\G: instead

See https://github.com/log2timeline/dfvfs/wiki/Windows-Path-Resolver for some information on paths on Windows.

Note that bdeinfo and bdemount expect the \\.\G: to contain the BDE encrypted volume.

xufuda commented 4 years ago

ok,thanks,i will try again.