Friday, September 16, 2011

FDPRO, HPAK and LINUX

If you've captured an image using HBGARY's FDPRO to create an HPAK and need to export the memdump.bin file in Ubuntu, use:

$ wine fdpro.exe path_to_.hpak -hpak extract memdump.bin

Monday, March 7, 2011

Windows 7 Bit-Locker Encrypted?

check your volume for \x2d\x46\x56\x45\x2d\x46\x53\x2d