Forensic Imaging on a BitLocker-encrypted Windows 11 drive
询问在Windows 11上使用BitLocker的情况下获取取证图像的可能性及其限制。 2025-12-7 16:49:47 Author: www.reddit.com(查看原文) 阅读量:0 收藏

Hi everyone, ​I have a question about acquiring a forensic image from a Windows 11 machine that has BitLocker enabled (FDE). ​Does BitLocker affect the imaging process itself? I am wondering if it makes the data capture impossible or if there are specific limitations I should be aware of when imaging under these conditions. ​Does the image remain encrypted/unreadable unless I have the recovery key, or does it hinder the creation of the physical image entirely? ​Thanks for your help.


文章来源: https://www.reddit.com/r/computerforensics/comments/1pgn2ca/forensic_imaging_on_a_bitlockerencrypted_windows/
如有侵权请联系:admin#unsafe.sh