OPENTEXT Tableau Forensic TX1 - Page 59

APFS Bitlocker Opal Tableau
Operation Locked Unlocked Locked Unlocked Locked Unlocked Locked Unlocked
Physical
Image/
Clone
(Source)
Full drive
will be
imaged/
cloned;
encrypted
state
Full drive
will be
imaged/
cloned;
encrypted
state
Full drive
will be
imaged/
cloned;
encrypted
state
Full drive
will be
imaged/
cloned;
encrypted
state
n/a (no
reads
possible)
Full drive
will be
imaged/
cloned;
unencrypt
-ed state
Full drive
will be
imaged/
cloned;
encrypted
state
Only the
unlocked
encryp-
tion
container
contents
will be
imaged/
cloned;
unencryp-
ted state
Wipe
(Dest)
Clears
drive
starting at
sector/
block 0
Clears
drive
starting at
sector/
block 0
Clears
drive
starting at
sector/
block 0
Clears
drive
starting at
sector/
block 0
n/a (no
writes
possible)
Clears
drive
starting at
sector/
block 0
Clears
drive
starting at
sector/
block 0
Clears
only the
unlocked
encryp-
tion
container
leaving
encryp-
tion intact
Format
(Dest)
n/a (no
APFS
support
on
destina-
tion)
n/a (no
APFS
support
on
destina-
tion)
Will
overwrite
existing
format-
ting,
including
BitLocker
Will
overwrite
existing
format-
ting,
including
BitLocker
n/a (no
writes
possible)
Formats
drive
starting at
sector/
block 0
Not
allowed
Formats
unlocked
encryp-
tion
container
only
leaving
encryp-
tion intact
Blank
check
(Source/
Dest)
Checks
full drive
starting at
sector/
block 0
Checks
full drive
starting at
sector/
block 0
Checks
full drive
starting at
sector/
block 0
Checks
full drive
starting at
sector/
block 0
n/a (no
reads
possible)
Checks
full drive
starting at
sector/
block 0
Not
allowed
Checks
contents
of
unlocked
encryp-
tion
container
only
3.3. Media utilities (traditional media)
ISTX240300-UGD-EN-1
User Guide
59