Course Description
In this course we will look at forensic collection of fully encrypted Windows and Mac computers with Evimetry.
Learning Objectives
By the end of this course, students should be able to:
How to identify a BitLocker’d or FileVault’d disk by signature
Acquire a FileVault’d Mac with Evimetry
Use Mount Image Pro to decrypt Windows and Mac encrypted volumes