Bitlocker/CoreStorage Encryption - Imaging only targeted data

[lcoughey]

With PC3000 Data Extractor, while it is possible to access the encrypted data within DE, the only way to target specific files to be imaged is to save them out and allow the system to image as the files are read. This process is slow and very taxing on a failing drive.

Now, with UFS Explorer professional, we have a few options to allow us to access the encrypted data, target the files and image them with the help of a hardware.

We can use UFS Explorer in conjunction with MRT, DeepSpar Disk Imager or even with the DeepSpar USB Stabilizer.
---

UFS-DDI-CoreStorageEncryption.png (108.5 KiB) Viewed 4228 times

[lcoughey]

My bad, it would appear that I jumped the gun and UFS Explorer doesn't allow me to send the command to DDI to image in the background the selected sectors as it does with a normal non-encrypted drive.

That said, if you are using UFS Explorer to do the imaging with the patient drive connected via DeepSpar USB Stabilizer, the concept should work.