If you prefer to use Linux or Mac OS X as primary operating system on your forensic workstation and deal with BitLocker-encrypted volumes on daily basis – you find this tool very helpful. Dislocker is a FUSE driver to read/write Windows’ BitLockered volumes under Linux or Mac OS X and has the following features:
- Windows Vista, 7, 8, 8.1 and 10 encrypted partitions;
- BitLocker-To-Go encrypted partitions – that’s USB/FAT32 partitions;
- be able to write on the above partitions.
More info and source code can be found here.