di...ta(1)

💖 di...ta(1) — printing information about a BitLocker-encrypted volume 💖

okay bestie, so the manual name here is di...ta and the command itself is dislocker-metadata — and yeah the man page header is being a little mysterious with that di...ta thing, but it's literally just the page title, don't stress 🫶

✨ NAME ✨

dislocker-metadata — printing information about a BitLocker-encrypted volume

🌸 SYNOPSIS 🌸

dislocker-metadata [OPTIONS]

🦋 DESCRIPTION 🦋

so here's the tea ☕ — Dislocker was designed to read BitLocker encrypted partitions under a Linux system. The driver it uses reads volumes encrypted in Windows system versions from Vista all the way to 10, plus BitLocker-To-Go encrypted partitions — and when we say that, we mean your USB/FAT32 partitions, iykyk 💅

The software works with a driver composed of a library, with multiple binaries using this library. When you're decrypting the partition, you have to give it a mount point where, once the keys are decrypted, a file named dislocker-file appears ✨ That file is a virtual NTFS partition, so you can mount it as any NTFS partition and then read from or write to it. And listen — writing to the NTFS virtual file will change the underlying BitLocker partition content. no cap, that's the real deal 🔥

This tool is useful in cryptography managing and forensics investigations 👑

🎀 OPTIONS 🎀

• -h — print all options to help 🙈
• -o — partition offset
• -v — increase verbosity to debug level 🐛
• -V VOLUME — volume to get metadata from 💾

👑 AUTHOR 👑

The DISLOCKER was written by Romain Coltel <romain.coltel@gmail.com> and Hervé Schauer Consultants <Secretariat@hsc.fr> 🫶

This manual page was written by Giovani Augusto Ferreira <giovani@debian.org> for the Debian project (but may be used by others). slay, honestly 💖

and that's the whole page, bestie!! 🎀 this one is DISLOCKER-METADATA 0.7.1, dated Jul 2017, and it lives in the di...ta(1) section. iconic, periodt ✨💅