During a forensic investigation, an analyst discovers that the suspect's hard drive was encrypted using BitLocker. The analyst has obtained the recovery key. Which of the following is the best next step to ensure data integrity?
Select one:
EC-Council often tests the principle that forensic imaging must occur before any decryption or analy...