Another important feature that is of particular interest is the encryption feature using the TCM chip in Windows. This encryption is enabled by default. This is great for users, but for forensics and incident response folks charged with removing data from devices on behalf of law enforcement, this could make their jobs a little more difficult. It’s similar to the default encryption on the iPhone 5. However, there’s a three to seven month delay from Apple for law enforcements requests for decryption. In cases such as a missing child, where time is of the essence, this is particularly troubling. With Microsoft also adding this capability, the days of “knock and look,” where law enforcement can gain immediate access to data to solve crimes, may be over.
Recently, Microsoft provided new information about the upcoming release of Windows 8.1, which includes updates to the security features. They are definitely steps in the right direction. Paul Henry, security and forensic analyst at Lumension, takes a closer look at some of these new features and what they mean for your organization.