Decrypting Full Disk Encryption with Dissect
Tags
attack-pattern: Data Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Keychain - T1142
Show in Graph
Common Information
Type Value
UUID e7a3c087-5e3f-47d6-b846-b93721e051de
Fingerprint bd01651db746a49a
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 11, 2024, 9:30 a.m.
Added to db Dec. 11, 2024, 9:05 a.m.
Last updated Dec. 13, 2024, 5:15 p.m.
Headline Decrypting Full Disk Encryption with Dissect
Title Decrypting Full Disk Encryption with Dissect
Detected Hints/Tags/Attributes 22/1/17
Source URLs
Redirection Url
Details Source https://blog.fox-it.com/2024/12/11/decrypting-full-disk-encryption-with-dissect/
URL Provider
Details Provider Source level domain
Details fox-it.com blog.fox-it.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 34 ✔ Fox-IT International blog https://blog.fox-it.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 5 
dissect.target
Details Domain 3 
dissect.target.target
Details File 5 
dissect.tar
Details File 5 
get.tar
Details File 2 
keychain.csv
Details File 2 
supersecretfile.txt
Details File 2 
helpers.key
Details File 3 
cloud-init.log
Details File 2 
keytype.pas
Details File 2 
disk-s001.vmdk
Details File 2 
disk-s002.vmdk
Details File 2 
disk-s003.vmdk
Details File 2 
disk-s004.vmdk
Details File 2 
disk-s005.vmdk
Details File 2 
disk-s006.vmdk
Details File 2 
disk.vmdk
Details IPv4 2 
192.168.212.129