Imaging a fully enc...
 
Notifications
Clear all

Imaging a fully encrypted MacBook Pro

5 Posts
2 Users
0 Reactions
562 Views
Redcelica67
(@redcelica67)
Estimable Member
Joined: 17 years ago
Posts: 130
Topic starter  

I have a case in where I need to image a wholly encrypted MacBook Pro. I do have the username and password and it appears to be encrypted with Filevault. I was going to image it live using FTK Imager CLI 2.9.0 from an external drive but it is no longer listed on AccessData's downloads page.

I was wondering of anyone here has dealt with a similar scenario to this and how they tackled it? Any advice would be really appreciated! !


   
Quote
(@alexmorris)
Active Member
Joined: 18 years ago
Posts: 4
 

FTK Imager CLI is still there as far as I can see - https://ad-zip.s3.amazonaws.com/ftkimager%203.1.1_Mac.u.zip


   
ReplyQuote
Redcelica67
(@redcelica67)
Estimable Member
Joined: 17 years ago
Posts: 130
Topic starter  

FTK Imager CLI is still there as far as I can see - https://ad-zip.s3.amazonaws.com/ftkimager%203.1.1_Mac.u.zip

Alex, this I think is the GUI version and I need the command line. thanks for your reply anyway.


   
ReplyQuote
(@alexmorris)
Active Member
Joined: 18 years ago
Posts: 4
 

It's listed under the section "Command Line Versions of FTK Imager".

Didn't think they did a GUI version for OSX.


   
ReplyQuote
Redcelica67
(@redcelica67)
Estimable Member
Joined: 17 years ago
Posts: 130
Topic starter  

Thanks Alex. I am suffering from sleep deprivation I think! AD don't but there is a GUI version by Ryan at AppleExaminer….


   
ReplyQuote
Share: