File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -361,6 +361,12 @@ the information between <filename>/proc/partitions</filename> and the
361361<command >df</command > output, you should be able to figure out which
362362external drive corresponds to which raw disk device name.</para >
363363
364+ <para >Raw devices of partitions protected by BitLocker provide access to the
365+ <emphasis >decrypted</emphasis > NTFS image. If the partition is locked, read
366+ attempts fail with <literal >Permission denied</literal >. The corresponding
367+ block range from the raw device of the full disk provides access to the
368+ <emphasis >encrypted</emphasis > image as stored on the disk.</para >
369+
364370<note ><para >Apart from tape devices which are not block devices and are
365371by default accessed directly, accessing mass storage devices raw
366372is something you should only do if you know what you're doing and know how to
You can’t perform that action at this time.
0 commit comments