and put it out while the encryption was running and caused in interesting scenario...
Some folders were untouched, but other folders turned into files without appendix. BitLocker created now recovery key for these folders as I checked.
I gave it one attempt with TestDisk to recover these files, interestingly, the drive was splitted in three partitions - the user had only time for checking one - but as a result several chk files were visible. But looking at the file sizes it did not seemed like the files I was looking for.
Following that I found a tool called deCHK to convert these chk files into the correct files they were supposed to be. However the tool only find 2 txt files - not worth to mention.
The user gave up further attempts, but out of curiosity: Would it have been possible to recover such files? Or rather difficult? An extra BitLocker recovery tool needed?
In case of certain experiences with similar cases, just let me know how your cases turned out. Would be interesting to know.
No comments:
Post a Comment