Imaging a fully enc...
 
Notifications
Clear all

Imaging a fully encrypted MacBook Pro

5 Posts
2 Users
0 Likes
360 Views
Redcelica67
(@redcelica67)
Posts: 130
Estimable Member
Topic starter
 

I have a case in where I need to image a wholly encrypted MacBook Pro. I do have the username and password and it appears to be encrypted with Filevault. I was going to image it live using FTK Imager CLI 2.9.0 from an external drive but it is no longer listed on AccessData's downloads page.

I was wondering of anyone here has dealt with a similar scenario to this and how they tackled it? Any advice would be really appreciated! !

 
Posted : 01/11/2012 5:53 pm
(@alexmorris)
Posts: 4
Active Member
 

FTK Imager CLI is still there as far as I can see - https://ad-zip.s3.amazonaws.com/ftkimager%203.1.1_Mac.u.zip

 
Posted : 01/11/2012 6:28 pm
Redcelica67
(@redcelica67)
Posts: 130
Estimable Member
Topic starter
 

FTK Imager CLI is still there as far as I can see - https://ad-zip.s3.amazonaws.com/ftkimager%203.1.1_Mac.u.zip

Alex, this I think is the GUI version and I need the command line. thanks for your reply anyway.

 
Posted : 01/11/2012 6:32 pm
(@alexmorris)
Posts: 4
Active Member
 

It's listed under the section "Command Line Versions of FTK Imager".

Didn't think they did a GUI version for OSX.

 
Posted : 01/11/2012 7:29 pm
Redcelica67
(@redcelica67)
Posts: 130
Estimable Member
Topic starter
 

Thanks Alex. I am suffering from sleep deprivation I think! AD don't but there is a GUI version by Ryan at AppleExaminer….

 
Posted : 01/11/2012 7:47 pm
Share: