Skip to content

Latest commit

 

History

History
8 lines (7 loc) · 765 Bytes

README.md

File metadata and controls

8 lines (7 loc) · 765 Bytes

xwf

A collection of configuration or definition files.

Reg Report DDPE.txt retrieves the Machine ID (MCID) and Shield ID (DCID) required to decrypt files using Dell Data Protection Encryption and saved as an HTML report. Also reports the Dell Server URI. DDPE policies vary by organization, which may include encryption of registry hive files. Will not work if policy enforces encryption of the SOFTWARE registry hive. Tested with XWF 20.7 SR-2.

References:
https://dl.dell.com/topicspdf/dell-data-protection-encryption_administrator-guide19_en-us.pdf
https://www.magnetforensics.com/blog/working-with-dell-data-protection-encryption-ddpe-in-axiom-cyber/
http://www.x-ways.net/winhex/manual.pdf (Section 5.9, Registry Report)