Forum Discussion
Digital Forensics: BitLocker Encrypted Drive
- 10 months ago
Thanks ChrisKershaw 🙂
User can you try running your first bdemount command as root? I'd also recommend mounting to the /mnt folder on the host, rather than trying to manage mountpoints on the Desktop.
Hi there 👋🏻,
Welcome to the Human Connection!
I'm Chris, I work in the Customer Support Team at Immersive, and I'll be happy to help you with your lab issue 😊.
I see you've used the correct sudo mount command, this should trigger a token that can be located within the /mnt/windows_mount directory. The second token is the deleted file.
Does this help at all?
- User10 months ago
Bronze II
nothing shows despite me having used both full and incomplete file paths
- ChrisKershaw10 months ago
Community Support
Hi there 👋🏻
Thank you for getting back to me, I'm sorry that you are still having difficulties with the lab.
I'm going to tag my colleague, Nye, who works in our Content Team, to see if they can advise any further, so we can help you continue with your attempt.
NyePrior do you have any other suggestions, that can help the user progress on this one?- NyePrior10 months ago
Immerser
Thanks ChrisKershaw 🙂
User can you try running your first bdemount command as root? I'd also recommend mounting to the /mnt folder on the host, rather than trying to manage mountpoints on the Desktop.