Hey! I'm sorry if this is in the wrong section, I couldn't quite find a perfect section.
So, a computer crashed here to the point where it couldn't start up. Dell is sending us a hard drive, so I would like to grab files off of the broken computer.
I loaded up CAINE (a forensic tool, able to grab disk images with it) and imaged the boken computer's drive on to my external drive (raw format).
It's about 70% done, then it hit me ... How will I decrypt the disk since it has AES256 encryption on it using Truecrypt? The obvious answer it just mounting the image, but I have a feeling it won't work for some reason.
Is there any process to decrypt the image so I can grab files from it?
Thanks a lot guys and sorry again if this is in the wrong section.
Do you have any CD that contain the TrueCrypt Recovery Disc? if your hdd is Encrypted with TrueCrypt, it should come with a CD/file/password. You will need to run a full permanent disk decryption to get the data back. CAINE can help you recover disk/image but still need to Decrypt the disk/image to get the data back.