Elcomsoft Forensic Disk Decryptor 2.20.1011 instal the new version for apple

Elcomsoft Forensic Disk Decryptor will automatically search for, identify and display encrypted volumes and details of their corresponding encryption settings.Īccess is provided by either decrypting the entire content of an encrypted volume or by mounting the volume as a drive letter in unlocked, unencrypted mode. With fully automatic detection of encrypted volumes and encryption settings, experts will only need to provide path to the encrypted container or disk image. If neither the encryption key nor the recovery key can be extracted, EFDD can extract meta data from the encrypted container to let Elcomsoft Distributed Password Recovery do its job. FileVault 2 recovery keys can be extracted from iCloud with Elcomsoft Phone Breaker, while BitLocker recovery keys are available in Active Directory or in the user's Microsoft Account. The toolkit allows using the volume's plain-text password, escrow or recovery keys, as well as the binary keys extracted from the computer's memory image or hibernation file. The portable installation can be used to image computer's volatile memory and/or decrypt encrypted volumes.Ī Fully Integrated Solution for Accessing Encrypted VolumesĮlcomsoft Forensic Disk Decryptor offers all available methods for gaining access to information stored in encrypted BitLocker, FileVault 2, PGP, TrueCrypt and VeraCrypt disks and volumes. In addition, Elcomsoft Forensic Disk Decryptor can be used to create a portable installation on a user-provided USB flash drive. EO1 format, as well as encrypted DMG images. Windows 7 and up to the latest Windows 10 update.Įlcomsoft Forensic Disk Decryptor 2.0 now fully supports EnCase images in the industry-standard. The driver is digitally signed with a Microsoft signature, making it fully compatible with all 32-bit and 64-bit versions of Windows from The supplied RAM imaging tool operates through a custom kernel-level driver. The tool uses zero-level access to computer's volatile memory in order to create the most complete memory image.

The tool extracts cryptographic keys from RAM captures, hibernation and page files or uses plain-text password or escrow keys to decrypt files and folders stored in crypto containers or mount encrypted volumes as new drive letters for instant, real-time access.Ī forensic-grade memory imaging tool is included with Elcomsoft Forensic Disk Decryptor. Instantly access data stored in encrypted BitLocker, FileVault 2, PGP, TrueCrypt and VeraCrypt containers. Elcomsoft Forensic Disk Decryptor | 41.75 MB |

Elcomsoft Forensic Disk Decryptor 2.20.1011 instal the new version for apple