You say this as if accessing that file was any easier than accessing memory.
If I have a disk image or access to the physical drive, it's trivial. This means they can no longer be considered encrypted at rest.
It is when the computer is off.
If I have a disk image or access to the physical drive, it's trivial. This means they can no longer be considered encrypted at rest.