Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20107

General Discussion: Forensic acquisition of a Secure Boot enabled system

$
0
0
ridders wrote: Jaclaz, Thank you for your response, I should have mentioned in my first post, what the result is from booting from USB or CD. The result is the following: If I attempt to boot from USB, I get the error "Setup Warning: Boot failure", this then returns to the boot device selection page. Or if I attempt to boot from CD, I get the error "Image failed to verify with *ACCESS DENIED*. Press any key to continue", this proceeds to another page which presents "Failed to start loader.efi (14) not found".Yep <img src="images/smiles/icon_smile.gif" alt="Smile" title="Smile" /> , but itmay depend on WHATyou attempt to booting from CD/DVD or USB. You need to boot *something* that also uses a Secureboot compatible bootloader/bootmanager. If the BIOS/UEFI is really "locked down" I guess that you are stuck. <img src="images/smiles/icon_sad.gif" alt="Sad" title="Sad" /> What you need is a forensic sound Linux live CD compatible with Secureboot or "merge" this: http://www.911cd.net/forums//index.php?showtopic=25269 with WinFE: http://reboot.pro/topic/19036-mini-winfe/ of course you will need to experiment on a test machine. The Fedora is one of the "approved" Linuxes, cannot say if any specifically "forensic" distro exists with these. Additionally and really "rare", but JFYI: http://www.forensicfocus.com/Forums/viewtopic/t=9426/ http://www.forensicfocus.com/Forums/viewtopic/t=8383/ http://www.forensicfocus.com/Forums/viewtopic/t=7907/ jaclaz

Viewing all articles
Browse latest Browse all 20107

Trending Articles