SANS ISC: SANS Daily Network Security Podcast (Stormcast) for Tuesday, September 13th 2016

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS Daily Network Security Podcast (Stormcast) for Tuesday, September 13th 2016

Johannes -
Regarding 'Mamba': if FDE is already in place, can Mamba encrypt over it?

Hello Johannes, I didn't try this scenario, but I think so. The encryption process occurs while the user is logged on and the filesystem is "open". In my opinion, in this case, Mamba could encrypt the partition (even already encrypted) and overwrites the MBR with it's own and ask for the password during the boot.