Raiders of the Encrypted Disk!

In 2022 ransomware strikes an innocent virtual hard disk leaving its contents unrecoverable… or so we were told. Digital forensics professionals on the other hand aren’t as easily dissuaded and will dive head first to try and piece the broken puzzle back together. This session will walk through an investigation involving a small organisation whose systems were hit with ransomware, and how we were able to use manual and automated methods to recover a series of forensic artefacts from an encrypted virtual hard disk that were critical to the case.