hello members…
I acquired physical image of the computer, unfortunately the computer was bitlocker locked. How can solve the problem???
If locked with a simple PIN try asking for the PIN. Otherwise you'll need the recovery key which you'll probably have to ask for too.
If you have a RAM image you could try using volatility to extract the FVEK (Full Volume Encryption Key). Use either
Then using either
Or you could try and brute force it?
If you are lucky the clearkey may be available in which case it should unlock automatically when emulated as a physical disk to windows or by using