Just a quick snippet to get all the Recovery Key’s for a specific user in the BitLocker database.
With MBAMRecoveryandHardware selected:
SELECT DomainName, u.Name Username, m.Name MachineName, k.LastUpdateTime KeyUpdate, VolumeGuid, RecoveryKey,RecoveryKeyId, Disclosed FROM [RecoveryAndHardwareCore].[Users] u JOIN [RecoveryAndHardwareCore].[Domains] d ON (u.DomainId = d.Id) JOIN [RecoveryAndHardwareCore].[Volumes_Users] v_u ON (u.Id = v_u.UserId) JOIN [RecoveryAndHardwareCore].[Volumes] v ON (v_u.VolumeId = v.Id) JOIN [RecoveryAndHardwareCore].[Keys] k ON (v.Id = k.VolumeId) JOIN [RecoveryAndHardwareCore].[Machines_Volumes] m_v ON (m_v.VolumeId = v.Id) JOIN [RecoveryAndHardwareCore].[Machines] m ON (m.Id = m_v.MachineId) WHERE u.Name = '**username here**'