Support mounted volumes - for example created with VeraCrypt.

thewhiteninja / ntfstool

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

MIT License

483 stars 97 forks source link

Support mounted volumes - for example created with VeraCrypt. #6

Closed GrzegorzDrozd closed 2 years ago

GrzegorzDrozd commented 2 years ago

Hi,

Great tool :) Can you please modify volume selection process to allow user to select volumes created by VeraCrypt for example? VeraCrypt uses on the fly encryption so recovery process should work as on physical drive, right ? We just need a way to select them.

Thanks and have a nice day.

thewhiteninja commented 2 years ago

With the last commit (bba038e8190b6a8a81948e3708ff5bd2f03bdf05), you should be able to list and access virtual volumes.

Tested with VeraCrypt only but it should also work with TrueCrypt.