If the SD or media card is encrypted,
the only way you're going to be able to decrypt this
is within the Android device.
What you can see is, on the left-hand screen,
it may look normal.
This is FTK Imager.
But as you look closely, you click on the image.
And when you look down at the hex, you cannot see anything.
You cannot open that picture.
However, on the decrypted one, you
can actually see that yoya, or the first 4
bytes of an actual graphic.
We can see Exif.
We can actually see readable information.
So if you find that you're looking at this
and you're like, oh, no, it's encrypted,
the SD card must go back into the phone.
The first thing we want to do is we want to go into Settings.
And under Biometrics and Security, Encrypt SD Card.
This is where you could also decrypt that SD card.
I'm going to say something right now
that I will say several times.
Decryption often happens on the phone or not at all.
If you pull off encrypted data, you're
going to have encrypted data.
Chances of you using a key and unlocking it-- maybe,
during parsing, for specific applications.
But for entire containers, it's very difficult.
The decryption usually happens on the device,
and then the data is acquired or not at all.
So very, very important.