Probably want to audit your Bitlocker keys right about now.

(Haven’t seen anything like this, so excuse me if this was already posted.)

Not to be a downer or anything, but there’s a possible unfortunate truth that a bunch of people are dying in the next few weeks. People that work at your work. With laptops. With Bitlocker. Are they backing up to AD? Are they valid? Have they bothered to login in the last 6 months? Do you have keys? They work?

I had one of these off domain/Bitlocker laptops about a year ago, and it took leaving it unplugged from the network and waiting for an exploit. Took months of poking at it.

Times a few dozen, and really high pressure... good to have a check tomorrow in MBAM or with a script.