
BSOD_bitlocker_recover
Python script for carving Bitlocker VMK keys
data-recoverydigital-forensicsdisk-forensics+3
27

Python script for carving Bitlocker VMK keys

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.