Video Description

This lab-based lesson covers obtaining the Windows Bitlocker Encryption Keys which allows an investigator to get a hard drive image as these keys are necessary to unlock the system. An investigator can obtain two types of images: physical and logical. Using the FTK Imager, participants receive step by step instructions in how to obtain images.

Course Modules

Incident Response & Advanced Forensics