What I have done so far. There is no password on filevault. I have connected a macbook pro laptop using a usb c port hub so I could acquire an image. I'm able to use Paladin v7.01 but was only able to acquire the smaller partition. There should be another partition but it doesn't appear. Why is that? What is the work around. The SSD for the MacBook pro is 500GB.
Hi try to use deft zero 2018. Has supporta for mac
http//
If Paladin doesn't have support (you should image disk0 and then you may need to use a mac to mount and review the data. Or blacklight if it's apfs encrypted).
If you're not seeing any of the disks then Recon Imager or Macquisition may be of use; whilst they arent free, they're pretty reliable