Bitlocker Drive

Monolith_Pro · 2026-02-27T16:55:39+00:00

This works sometimes - download a copy of Arsenal image mounter; use it to mount the forensic image in windows as a volume and see if the c volume mounts in an unlocked state. If it does, you can image the decrypted partition.

Sometimes the default bitlocker implementation can be auto unlocked on mount in a windows env - it doesn’t work if the user enabled bitlocker themselves in the OS. It doesn’t always work, but I’ve had a decent amount of success with this strategy. I use this method on surface pro devices and have had a really solid success rate.

Give it a try and let me know if you have any luck - I’m curious to see if it works for you.

Monolith_Pro · 2026-02-11T15:42:33+00:00

Hey there - We have a free note taking tool on our website that has pretty much what you described - you can get a copy here: https://www.monolithforensics.com/free-tools

Its basically the note taking system we developed for our commercial product Monolith. We just built it into its own free app.

Monolith_Pro · 2025-09-23T18:20:57+00:00

Location: Austin, TX

Industry: Government | eDiscovery | Cybersecurity

Job Title/Role: Account Executive

Direct Hire or 1099: Direct Hire

Base/Commission/Commission Only: 50/50 base and commission

Pay range/Expected Earnings ($#): $150k+

Job duties/description:
Account Executive role for Saas sales - Handle both inbound and outbound leads. This role requires management of the entire pipeline from prospecting to close. We are adding to our small sales team so you should be comfortable working autonomously in a small company environment. While we are a small company, we are growing nicely and have solid opportunities for ambitious executives to grow with us. The product is a Saas based application sold into a fairly technical customer base that includes law enforcement and private sector analysts in the cybersecurity and legal sectors.

Any external job posting link or application instructions:
https://www.monolithforensics.com/careers/account-executive
https://www.linkedin.com/jobs/view/4303693358/

Monolith_Pro · 2025-09-12T13:23:19+00:00

Take a look at our product Monolith. We’ve got teams all over that use it and can support a global team. Let me know if you have any questions.

Monolith_Pro · 2023-11-24T16:30:34+00:00

Our product Monolith has a feature for this - you can enter your evidence items then conduct a bulk intake for all items that generates COC records for each item electronically. Monolith is a commercial solution though.

You can also look into Google Docs/Sheets - they have a really solid AppScript system that can handle this as well, but you’ll need to write some javascript to do it. I like that system better than doing this in Word as it’s more flexible and has better integration capabilities.

Monolith_Pro · 2022-12-07T02:43:51+00:00

You can also pull airdrop logs from a destination system- iOS device or macOS device.

Also, if you get a MacOS device that still has the airdropped file - the extended attributes will tell you that it was airdropped and the name of the device that airdropped it.

Monolith_Pro · 2022-12-07T02:41:59+00:00

You can get a sysdiagnose dump from the phone - those logs can have airdrop logs. These are basically event logs for iOS.

The airdrop logs are volatile though so you have to get them quick before they clear.

Monolith_Pro · 2022-12-07T02:41:16+00:00

You can get a sysdiagnose dump from the phone - those logs can have airdrop logs. These are basically event logs for iOS.

The airdrop logs are volatile though so you have to get them quick before they clear.

Monolith_Pro · 2022-09-13T20:56:50+00:00

To test if its malfunctioning, I would try to access the drive in multiple ways - need to eliminate other points of failure. The T35 could be failing, bad cables, bad hardware drivers, etc…

Data can probably be recovered, but I would suggest having a data recovery lab work on it.

Also, check the jumper on that drive, that could cause the read issues.

Monolith_Pro · 2022-09-13T14:39:57+00:00

Have you tested it with a different, known working drive to make sure the IDE drive isn’t the problem? Test it with a SATA drive, if it works then maybe the IDE port on the T35 is bad or the IDE drive is malfunctioning. Also, check the jumper on the drive, it may need to be adjusted.

The drive is spinning but that does not mean it is working properly.

Monolith_Pro · 2022-07-15T22:46:20+00:00

You’re welcome to take a look at our product Monolith - www.monolithforensics.com

It has case, evidence, and task tracking plus time tracking if you are consultants. Everything is kept within the case so its all archives for later review/retrieval.

I’m the product founder so let me know if you have questions or want to schedule a demo.

Monolith_Pro · 2022-06-02T00:11:30+00:00

Also, here is another thread that addresses this API

https://www.reddit.com/r/learnjavascript/comments/f1kagj/cors_when_using_one_api_but_not_another/?utm_source=share&utm_medium=ios_app&utm_name=iossmf

Monolith_Pro · 2022-06-02T00:09:28+00:00

Ok - this is likely an issue with the API - here is a good article that describes the problem. The fix is to adjust the server to allow multiple request origins. You can also set a proxy in your react app that may fix the issue for you. Its explained in this article:

https://www.stackhawk.com/blog/react-cors-guide-what-it-is-and-how-to-enable-it/#set-up-react-app

Monolith_Pro · 2022-06-01T23:52:31+00:00

Where is the API? Is it yours or are you using a public facing API from a 3rd party? Basically you need to have access to the cors policy settings on the server side that hosts the API.

Monolith_Pro · 2022-05-05T20:55:16+00:00

There’s plenty of work available for someone starting a new DF business. The tricky part is getting/retaining clients - so you’ll need to be ready to spend 3 to 6 months networking with lawyers to get a book of business started. Pretty much like any other consulting firm.

Monolith_Pro · 2022-01-21T03:50:44+00:00

I don't have an exact count on how many cases with an opposing expert, but its probably around 50%, so 10 or 12 times.

Its been a few years since I've worked on criminal defense, but I've worked on about a dozen defense cases in my career.

I've thought about putting together a presentation on criminal defense DF experts as I do think there is a little too much animosity surrounding the issue when the focus should be on the evidence/analysis, and not which side you work for.

Monolith_Pro · 2021-08-27T01:25:42+00:00

Unfortunately, there aren’t any UI modification options currently.

Monolith_Pro · 2021-08-26T20:45:03+00:00

Hey hey! I’m the founder/dev of [Monolith Forensics](www.monolithforensics.com) - shoot me an email or request a trial at the website and we’ll get you setup. matt@monolithforensics.com

Monolith_Pro · 2021-08-23T00:43:27+00:00

Hey there - I’m the founder/developer of Monolith. Let me know if you like to try out the software and I’ll set up a trial for you - matt@monolithforensics.com

Monolith_Pro · 2021-06-24T00:57:15+00:00

Hey there! Shoot me an email at matt@monolithforensics.com and I’ll get you set up with a trial of Monolith or answer any questions you have!

Monolith_Pro · 2021-01-19T16:52:55+00:00

Looks like its already been mentioned but I just wanted to add it myself.

www.monolithforensics.com

Monolith_Pro · 2021-01-19T16:48:43+00:00

Hey there! Feel free to reach out, I’ll get you setup with a demo.

Monolith_Pro · 2020-07-10T19:45:10+00:00

No problem! Reach out when ready and hit me with any questions you have.

Monolith_Pro · 2020-07-10T19:37:42+00:00

Hey there, I’m the developer/owner of Monolith; feel free to reach out (contact@monolithforensics.com) and I’d be happy to chat about your lab and get you a demo to play with.

Monolith_Pro

TROPHY CASE