Posted: Tue Nov 03, 2015 6:08 am Post subject: Decrypting Password Protected Word 2000 Documents
I'm am new to computer forensics. I am currently enrolled in a Digital Forensics I course and am trying to explore outside the course material. I personally have been working as a system administrator for the past 3 years. In class we were given a test image to load into FTK. we are using a free version, which is v1.071 - DEMO. We are using the image to get an introduction to FTK, by using index search to find key data, bookmarking that info and then creating reports.
In the image I noticed that there are several files that FTK has marked as encrypted. Several word documents, and 2 PGP secret key rings. I exported all of the files and the word documents are password protected. My question is how can I decrypt those Word files to gain access?
Also in a forensic scenario, what would an investigator do when confronted with encrypted files? And what tools are available to try and crack them?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum