I have an image created from a laptop with two BitLocker encrypted partitions; recovery key for both partitions is present.
When adding this .E01 to Autopsy, it asks for the expected identifiers, and positively checks if the corresponding recovery key is valid. However, after entering the key for 92B7… it will ask for the recovery key for 35AD…, and then again for 92B7…, and an infinite loop begins, preventing the image from being ingested.
Is there a way to define a map of identifiers to recovery keys beforehand or during the ingest process, so that images with multiple BitLocker partitions can be processed?