Imaging Microsoft Surface Pro

I’m trying to figure out the best way to image Microsoft Surface Pro’s.

How is everyone doing these? Do you log in first to get the bitlocker password via CMD and then boot to Paladin to image? Do you just login and use FTK on a USB to grab the C drive?

These devices seem to have some extra security features that make things difficult. If you change secure boot you will need the bitlocker key to log back in. …

bitlocker boot computerforensics devices doing drive grab image imaging log login microsoft paladin password pro usb