[SATLUG] Drive Encryption

[Daniel J. Givens]

Ernest de Leon wrote:
> Recently, my
> organization (government) purchased a copy of the EnCase software to search
> several computers... If so, are fully encrypted drives immune to
> the EnCase search methods?  What do you recommend for encrypting our
> sensitive data so that not even software like EnCase can pull data from our
> servers.

Make sure you check with your organization on the encryption policies so
you aren't setting yourself or anyone else up for termination. If it is
a government network, anything plugged into it is likely to be required
to be accessible for monitoring. Any information assurance office should
be under strict policy to maintain the security of information on those
systems (that's their job). If you are a contractor and using government
systems or systems on a government network to store "sensitive"
information that you don't want them being privy to, I would suggest you
pull it off and host it on a corporate or personal storage medium. Check
with your local IA folks to make sure on the policy. I doubt they will
be cool with you trying to hide stuff on their network unless it was for
official business and sanctioned by them.

~Daniel