Related By Tag: encryption

Capture Image of FileVault2 Encrypted Media With Recovery Key

Objective The purpose of this walkthrough is to demonstrate how to successfully decrypt and gain access to a FileVault® 2 protected volume when the recovery key or passphrase is known in order to capture a forensic image for analysis.   Tools Used EnCase® v6.18 (Guidance® Software) MacQuisition™ (BlackBag™ Technologies) FTK® Imager (AccessData®) Mac OS® Terminal Note:[…Read More]