OpenText Tableau Forensic TX1 Imager
The Information Company 147
• GuardianEdge Encryption (Plus, Anywhere, Hard Disk Encryption)
• LUKS
• McAfee Drive Encryption (SafeBoot)
• Opal
• Sophos Safeguard (Enterprise and Easy/Ultimaco)
• Symantec Endpoint Encryption
• Symantec PGP Disk
• WinMagic SecureDoc Full Disk Encryption
Encryption detection information is always shown in the drive tile for a given drive,
regardless of the viewing location within the user interface and what type of encryption is
present (whole disk or partition based). For example, even if only one partition on a given
drive is encrypted with BitLocker, a BitLocker encryption warning message will appear in
the top-level drive tile regardless where it is viewed. In situations where partitions are
broken out under a drive tile (which occurs for any function that involves filesystem
operations, like browsing and logical image setup), more granular information is
presented in the partition tiles under each drive, making it obvious which of the drive’s
partitions has encryption.
Note: In addition to detecting BitLocker encryption, TX1 can also unlock and perform any
supported operations on a drive/partition encrypted with BitLocker. See “BitLocker
encryption” on page 49 for more information.
Encryption information is also provided in the header of the Drive Details view, in the
Content Breakdown view, and in the forensic logs.
Copyright © 2022 Open Text. All rights reserved. Trademarks owned by Open Text.