How do I determine the sectors that are occupying a drive track? I am interested in locating "the last 512 bytes of the first logical drive track" in order to determine if a drive is encrypted with ...
Is there any full disk encryption out there that does not have any forensic traces? Any effective method?
I've been testing quite a number of full disk encryptions but still new in computer forensic stuffs. I'm fully aware of decoy/hidden OS and cold boot attack though. Even Truecrypt and Bestcrypt ...