Hi everyone,
I want to ask how we can have access or examine a password protected hard disk image with autopsy. Maybe have someone of you a plugin to suggest? Thanks a lot.
that’s a pretty vague question. What type of encryption are we talking about? Password at the boot level, OS and the username/admin or are you referring to something like BitDefender?
password protected hard disk image
Consider first mounting the password protected image with a third party tool (e.g., FTK imager/Arsenal for Windows) and then pointing Autopsy as the mounted, virtual raw disk.
But @Dan_Sorensen is correct: without providing more details, i.e., disk image format, the OS on which you are running Autopsy, it is hard to provide more specific guidance.