BitLocker Wiederherstellungsschlüssel wurde ohne sichtbaren Grund geändert

# BitlockerInfo.ps1
# Shows Bitlocker recovery password for all drives
# Creates by Stefan Kittel (https:{{comment_single_line_double_slash:0}}
# Version 13.05.24 09:21

# Output like
# C:{xxxxxxx-339B-410B-90DB-7F211BD61876}:xxxxxxx-384109-643698-023991-193688-493592-234124-xxxxxxx,P:{xxxxxxx-3B16-4D04-86EC-CCEC1D8CC94C}:xxxxxxx-014311-534391-553025-196163-033759-412577-xxxxxxxx

#https:{{comment_single_line_double_slash:1}}

$OutputString =""  

$BitlockerMountPointArray = (Get-BitlockerVolume)
foreach ($BitlockerMountPointItem in $BitlockerMountPointArray)
{
	If ($BitlockerMountPointItem.protectionstatus -like "On")   
	{
		foreach ($KeyProtector in $BitlockerMountPointItem.KeyProtector)
		{
			if ($KeyProtector.KeyProtectorType -eq "RecoveryPassword")  
			{
				$OutputString = $OutputString + $BitlockerMountPointItem.MountPoint
				$OutputString = $OutputString + $KeyProtector.KeyProtectorId
				$OutputString = $OutputString + ":"  
				$OutputString = $OutputString + $KeyProtector.RecoveryPassword
				$OutputString = $OutputString + ","  
				$OutputCount = $OutputCount + 1
			}
			else
			{
				#No infos about tpm or ad stored keys, ignore
			}
		}
	}
	else
	{
		#No infos about unencrypted drives
	}
}

if (!$OutputString)
{
	Write-Host "No recovery passwords found"  
	exit 0
}

#remove last comma
$OutputString = $OutputString.trim(",")  
#Write-Host $OutputString

#create hash from output string
$hashString = [System.BitConverter]::ToString([System.Security.Cryptography.HashAlgorithm]::Create('sha256').ComputeHash([System.Text.Encoding]::UTF8.GetBytes($OutputString)))  
#Write-Host $hashString

#reg infos
$KeyPath = "HKLM:\SOFTWARE\SKIT\BitlockerInfo2"  
$ValueName = $hashString
$ValueData = Get-Date

#get last hash info from registry, use later to set exit code
$LastHashUpdate = (Get-ItemProperty -Path $KeyPath -Name $ValueName -ErrorAction SilentlyContinue).$ValueName

#create path if not exists
If (-NOT (Test-Path $KeyPath))
{
	New-Item -Path $KeyPath -Force | Out-Null
}

#create/update registry value
New-ItemProperty -Path $KeyPath -Name $ValueName -Value $ValueData -Type String -Force | Out-Null

#if new item return error to force rmm to log it
if (!$LastHashUpdate)
{
	#Write-Host 1001
	Write-Host $OutputString
	exit 1001
}
else
{
	#Write-Host OK
	Write-Host $OutputString
	exit 0
}