I have a case in where I need to image a wholly encrypted MacBook Pro. I do have the username and password and it appears to be encrypted with Filevault. I was going to image it live using FTK Imager CLI 2.9.0 from an external drive but it is no longer listed on AccessData's downloads page.
I was wondering of anyone here has dealt with a similar scenario to this and how they tackled it? Any advice would be really appreciated! !
FTK Imager CLI is still there as far as I can see - https://
FTK Imager CLI is still there as far as I can see - https://
ad-zip.s3.amazonaws.com/ftkimager%203.1.1_Mac.u.zip
Alex, this I think is the GUI version and I need the command line. thanks for your reply anyway.
It's listed under the section "Command Line Versions of FTK Imager".
Didn't think they did a GUI version for OSX.
Thanks Alex. I am suffering from sleep deprivation I think! AD don't but there is a GUI version by Ryan at AppleExaminer….