Forensics Level 5 100 points

Crack BitLocker Encrypted Drive

Mission

Learn BitLocker recovery-key verification with a safe metadata fixture. bitlocker.img is not a real volume. Match a candidate key SHA-256 against the recorded digest, then recover the protected payload.

#forensics#bitlocker#encryption#windows#hashcat

Clear it in 3 steps

Not started
  1. Start the environment

  2. Investigate the target

  3. Submit the flag