rapid7/metasploit-framework — pull request #2904 by Meatballs1 (2014-01-22 09:53:03+00:00)
Title: Windows::Post - Recover Bitlocker Recovery Keys

Lining up some post modules to use the extapi functionality, so branched off previous LDAP work. When that is committed this should just be a single module PR.

This module pulls down bitlocker recovery keys from LDAP. It does require Domain Admin to access but kinda interesting :)

Bitlockering a Windows VM isn't possible in VMWare but you can encrypt a second harddrive (add a second one in settings).

Use gpedit.msc > Windows Settings > Administrative Templates > Windows Components > BitLocker > Fixed Data Drives > Choose how Bitlocker protected fixed drives can be recovered

Enable and tick Save BitLocker recovery information to AD DS