dissect.target.volumes.bde

Module Contents

Classes

BitlockerVolumeSystem

An extension of the VolumeSystem class that provides additional functionality for

Attributes

log

dissect.target.volumes.bde.log

exception dissect.target.volumes.bde.BitlockerVolumeSystemError(message=None, cause=None, extra=None)

Bases: dissect.target.exceptions.VolumeSystemError

A volume system error occurred.

class dissect.target.volumes.bde.BitlockerVolumeSystem(fh: BinaryIO | list[BinaryIO], *args, **kwargs)

Bases: dissect.target.volume.EncryptedVolumeSystem

An extension of the VolumeSystem class that provides additional functionality for dealing with encryption.

It adds helper functions for interacting with the KEYCHAIN, so that subclasses don’t have to manually interact with it.

Subclasses must set the PROVIDER class attribute to a unique string, e.g. bitlocker.

Parameters:

fh – The file-like object on which to open the encrypted volume system.

PROVIDER = 'bitlocker'

unlock_with_passphrase(passphrase: str) → None

unlock_with_recovery_key(recovery_key: str) → None

unlock_with_bek_file(bek_file: pathlib.Path) → None

unlock_volume() → dissect.util.stream.AlignedStream