April 17, 2023, 11:14 a.m. | /u/Severe-Effective-651

Computer Forensics www.reddit.com

Hi!

I have a live system, with a hard disk what is encrypted by bitlocker. The bitlocker is unlocked now, but has not been turned off.

At this point if I make an image of this physical drive, will I be able to analyze the image content without the bitlocker password?

Or only in the case if i will make image like "Contents of a Folder"?

Or any other suggestions on how I can get an image of the live …

bitlocker case computerforensics disk drive encrypted folder hard live password physical point system unlocked what is

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

Associate Manager, BPT Infrastructure & Ops (Security Engineer)

@ SC Johnson | PHL - Makati

Cybersecurity Analyst - Project Bound

@ NextEra Energy | Jupiter, FL, US, 33478

Lead Cyber Security Operations Center (SOC) Analyst

@ State Street | Quincy, Massachusetts

Junior Information Security Coordinator (Internship)

@ Garrison Technology | London, Waterloo, England, United Kingdom

Sr. Security Engineer

@ ScienceLogic | Reston, VA