Resource Center

Free Tool

Magnet Encrypted Disk Detector

Encrypted Disk Detector: What does it do?

Magnet Encrypted Disk Detector (v3.10 released June 19th, 2022) is a command-line tool that can quickly and non-intrusively check for encrypted volumes on a computer system during incident response. The decision can then be made to investigate further and determine whether a live acquisition needs to be made in order to secure and preserve the evidence that would otherwise be lost if the plug was pulled .

Encrypted Disk Detector checks the local physical drives on a system for TrueCrypt, PGP®, VeraCrypt, Check Point related processes, SafeBoot, or Bitlocker® encrypted volumes. If no disk encryption signatures are found in the MBR, EDD also displays the OEM ID and, where applicable, the Volume Label for partitions on that drive, checking for Bitlocker® volumes.


Windows 7 or higher.

Fill out the form below to receive a copy of MAGNET Encrypted Disk Detector.

Note: Check your inbox for a confirmation email after completing the form.

By downloading Free Tools software from Magnet Forensics you agree that your use of the software is governed by the End User License Agreement available at

©2020 Magnet Forensics Inc. All rights reserved.

Get the Free Tool

Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.

Start modernizing your digital investigations today.