3 hours ago
Perhaps I'm mixing imaging programs but isn't a possible cause for differences in live vs non-live image file size being live uses VSS to collect what will be saved in the image file and non-live doesn't need to use VSS since the source drive is static?
How is a Bit-locked drive imaged without unlocking - wouldn't the basic filesystem be unavailable for the imaging program to determine which blocks are in-use?
How is a Bit-locked drive imaged without unlocking - wouldn't the basic filesystem be unavailable for the imaging program to determine which blocks are in-use?