Forensic Disk Decryptor 2.18 extracts VeraCrypt on-the-fly encryption keys
Elcomsoft Forensic Disk Decryptor is updated to support RAM imaging and extraction of on-the-fly encryption keys in recent versions of VeraCrypt, the most popular TrueCrypt successor. The keys are extracted for all encryption configurations.
👉 https://www.elcomsoft.com/news/787.html
📝 Release Notes (PDF)
#veracrypt #diskencryption #desktopforensic #digitalsecurity
Elcomsoft Forensic Disk Decryptor is updated to support RAM imaging and extraction of on-the-fly encryption keys in recent versions of VeraCrypt, the most popular TrueCrypt successor. The keys are extracted for all encryption configurations.
👉 https://www.elcomsoft.com/news/787.html
📝 Release Notes (PDF)
#veracrypt #diskencryption #desktopforensic #digitalsecurity
Breaking VeraCrypt: Obtaining and Extracting On-The-Fly Encryption Keys
Released back in 2013, VeraCrypt picks up where TrueCrypt left off. Supporting more encryption algorithms, more hash functions and a variable number of hash iterations, VeraCrypt is the default choice for the security conscious. VeraCrypt has no known weaknesses except one: once the encrypted disk is mounted, the symmetric, on-the-fly encryption key must be kept in the computer’s RAM in order to read and write encrypted data. A recent change in VeraCrypt made OTF key extraction harder, while the latest update to Elcomsoft Forensic Disk Decryptor attempts to counter the effect of the change. Who is going to win this round?
👉 https://blog.elcomsoft.com/2021/06/breaking-veracrypt-obtaining-and-extracting-on-the-fly-encryption-keys/
#veracrypt #diskencryption #fde #otfekeys #truecrypt
Released back in 2013, VeraCrypt picks up where TrueCrypt left off. Supporting more encryption algorithms, more hash functions and a variable number of hash iterations, VeraCrypt is the default choice for the security conscious. VeraCrypt has no known weaknesses except one: once the encrypted disk is mounted, the symmetric, on-the-fly encryption key must be kept in the computer’s RAM in order to read and write encrypted data. A recent change in VeraCrypt made OTF key extraction harder, while the latest update to Elcomsoft Forensic Disk Decryptor attempts to counter the effect of the change. Who is going to win this round?
👉 https://blog.elcomsoft.com/2021/06/breaking-veracrypt-obtaining-and-extracting-on-the-fly-encryption-keys/
#veracrypt #diskencryption #fde #otfekeys #truecrypt
ElcomSoft adds OneDrive, Microsoft Timeline extraction
Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, adding the ability to download OneDrive files and activities from the Windows 10 Timeline. Elcomsoft Phone Viewer is also updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.
👉 https://www.elcomsoft.com/news/788.html
#mobileforensics #onedrive #personalvault #windowstimeline #phonebreaker
Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, adding the ability to download OneDrive files and activities from the Windows 10 Timeline. Elcomsoft Phone Viewer is also updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.
👉 https://www.elcomsoft.com/news/788.html
#mobileforensics #onedrive #personalvault #windowstimeline #phonebreaker
Analyzing Microsoft Timeline, OneDrive and Personal Vault Files
Elcomsoft Phone Breaker is not just about Apple iCloud data. It can also download the data from other cloud services including Microsoft accounts. In this new version, we have added support for even more types of data, including Windows 10 Timeline, Account Activity (logins to the account), OneDrive files, recent OneDrive files history, and files from Microsoft Personal Vault. Learn about these data types and how they can help advance your investigation.
👉 https://blog.elcomsoft.com/2021/06/analyzing-microsoft-timeline-onedrive-and-personal-vault-files/
#cloudsecurity #onedrive #personalvault #microsofttimeline #phonebreaker
Elcomsoft Phone Breaker is not just about Apple iCloud data. It can also download the data from other cloud services including Microsoft accounts. In this new version, we have added support for even more types of data, including Windows 10 Timeline, Account Activity (logins to the account), OneDrive files, recent OneDrive files history, and files from Microsoft Personal Vault. Learn about these data types and how they can help advance your investigation.
👉 https://blog.elcomsoft.com/2021/06/analyzing-microsoft-timeline-onedrive-and-personal-vault-files/
#cloudsecurity #onedrive #personalvault #microsofttimeline #phonebreaker
Elcomsoft System Recovery update simplifies digital field triage
Elcomsoft System Recovery, a digital field triage tool, receives an update. The tool adds the ability to extract Wi-Fi passwords and helps identify the owner of the computer being examined by extracting its Windows license key. In addition, file system analysis is made easier with an embedded two-panel file manager.
📝 Release notes (PDF)
👉 https://www.elcomsoft.com/news/789.html
#esr #wifipassword #licensekey #dfir #digitalforensics #encryption #windows
Elcomsoft System Recovery, a digital field triage tool, receives an update. The tool adds the ability to extract Wi-Fi passwords and helps identify the owner of the computer being examined by extracting its Windows license key. In addition, file system analysis is made easier with an embedded two-panel file manager.
📝 Release notes (PDF)
👉 https://www.elcomsoft.com/news/789.html
#esr #wifipassword #licensekey #dfir #digitalforensics #encryption #windows
Elcomsoft System Recovery Simplifies Digital Field Triage and In-Field Investigations
Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.
👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.
👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
How to Remove Restrictions from Adobe PDF Files
Have you got an Adobe PDF file that you can open but cannot edit, print or copy selected text to the clipboard? There is an easy solution: with just a couple of clicks, the file can be unprotected. Bad news: you’ll need software. Good news: we’ve built one for you.
👉 https://blog.elcomsoft.com/2021/07/how-to-remove-restrictions-from-adobe-pdf-files/
#pdf #adobe #apdfpr #PDFRestrictions
Have you got an Adobe PDF file that you can open but cannot edit, print or copy selected text to the clipboard? There is an easy solution: with just a couple of clicks, the file can be unprotected. Bad news: you’ll need software. Good news: we’ve built one for you.
👉 https://blog.elcomsoft.com/2021/07/how-to-remove-restrictions-from-adobe-pdf-files/
#pdf #adobe #apdfpr #PDFRestrictions
Elcomsoft Phone Viewer 5.31 update previews OneDrive deleted files metadata
Elcomsoft Phone Viewer gains the ability to preview metadata for files deleted from OneDrive prior to restoring the files. In addition, the update fixes the issue with Skype attachments.
👉 https://www.elcomsoft.com/news/790.html
#onedrive #phoneviewer #mobileforensics
Elcomsoft Phone Viewer gains the ability to preview metadata for files deleted from OneDrive prior to restoring the files. In addition, the update fixes the issue with Skype attachments.
👉 https://www.elcomsoft.com/news/790.html
#onedrive #phoneviewer #mobileforensics
iOS Forensic Toolkit 7.02 simplifies macOS installations, fixes corrupted file system extraction
Elcomsoft iOS Forensic Toolkit 7.02 is a minor update making it easier to install the tool on macOS computers and introducing a new agent extraction option to fix the extraction of corrupted file systems.
👉 https://www.elcomsoft.com/news/791.html
#ios #mobileforensics #macOS #filesystem
Elcomsoft iOS Forensic Toolkit 7.02 is a minor update making it easier to install the tool on macOS computers and introducing a new agent extraction option to fix the extraction of corrupted file systems.
👉 https://www.elcomsoft.com/news/791.html
#ios #mobileforensics #macOS #filesystem
Updated Elcomsoft iOS Forensic Toolkit Simplifies macOS Installs, Fixes Corrupted File System Extraction
While we are still working on the new version of Elcomsoft iOS Forensic Toolkit featuring forensically sound and nearly 100% compatible checkm8 extraction, an intermediate update is available with two minor yet important improvements. The update makes it easier to install the tool on macOS computers, and introduces a new agent extraction option.
👉 https://blog.elcomsoft.com/2021/07/updated-elcomsoft-ios-forensic-toolkit-simplifies-macos-installs-fixes-corrupted-file-system-extraction/
#ios #mobileforensics #macOS #filesystem
While we are still working on the new version of Elcomsoft iOS Forensic Toolkit featuring forensically sound and nearly 100% compatible checkm8 extraction, an intermediate update is available with two minor yet important improvements. The update makes it easier to install the tool on macOS computers, and introduces a new agent extraction option.
👉 https://blog.elcomsoft.com/2021/07/updated-elcomsoft-ios-forensic-toolkit-simplifies-macos-installs-fixes-corrupted-file-system-extraction/
#ios #mobileforensics #macOS #filesystem
iOS Privacy Protection Tools: Encrypted DNS, iOS 15 Private Relay, Proxy, VPN and TOR
Protecting one’s online privacy is becoming increasingly more important. With ISPs selling their customers’ usage data left and right, and various apps, mail and Web trackers contributing to the pool of “anonymized” data, de-anonimyzation becomes possible with big data analysis. This was clearly demonstrated with the recent event.
Apple did an attempt protecting their users’ location by introducing approximate locations in iOS 14. That change alone makes analyzing aggregate data from iPhone users more difficult but not impossible. In this publication, we compare the tools to protect one’s privacy online while using Apple iOS devices and desktop computers by making one’s browsing activities inaccessible to the middleman.
👉 https://blog.elcomsoft.com/2021/07/ios-privacy-protection-tools-encrypted-dns-ios-15-private-relay-proxy-vpn-and-tor/
#ios #vpn #privacy
Protecting one’s online privacy is becoming increasingly more important. With ISPs selling their customers’ usage data left and right, and various apps, mail and Web trackers contributing to the pool of “anonymized” data, de-anonimyzation becomes possible with big data analysis. This was clearly demonstrated with the recent event.
Apple did an attempt protecting their users’ location by introducing approximate locations in iOS 14. That change alone makes analyzing aggregate data from iPhone users more difficult but not impossible. In this publication, we compare the tools to protect one’s privacy online while using Apple iOS devices and desktop computers by making one’s browsing activities inaccessible to the middleman.
👉 https://blog.elcomsoft.com/2021/07/ios-privacy-protection-tools-encrypted-dns-ios-15-private-relay-proxy-vpn-and-tor/
#ios #vpn #privacy
Apple Watch Forensics: The Adapters
How do you extract an Apple Watch? While several methods are available, none of them will work if you want to access the device directly without an adapter. There are several different options available on the market, some of them costing north of $200. We tested a large number of such adapters. How do they stand to the marketing claims? In this article, I will share my experience with these adapters.
👉 https://blog.elcomsoft.com/2021/08/apple-watch-forensics-the-adapters/
#applewatch #mobileforensics #dfir #iosforensictoolkit
How do you extract an Apple Watch? While several methods are available, none of them will work if you want to access the device directly without an adapter. There are several different options available on the market, some of them costing north of $200. We tested a large number of such adapters. How do they stand to the marketing claims? In this article, I will share my experience with these adapters.
👉 https://blog.elcomsoft.com/2021/08/apple-watch-forensics-the-adapters/
#applewatch #mobileforensics #dfir #iosforensictoolkit
NAS Forensics: TrueNAS Encryption Overview
Established NAS manufacturers often offer some kind of encryption to their users. While anyone can use “military-grade AES-256 encryption”, the implementation details vary greatly. Synology, Asustor, and TerraMaster implement folder-based encryption, while QNAP, Thecus, and Asustor (MyAcrhive) employ full-disk encryption; the full comparison is available here. In this article, we’ll have a look at encryption methods used in TrueNAS, a system commonly used by computer enthusiasts for building custom NAS servers.
👉https://blog.elcomsoft.com/2021/08/nas-forensics-truenas-encryption-overview/
#nas #truenas #encryption
Established NAS manufacturers often offer some kind of encryption to their users. While anyone can use “military-grade AES-256 encryption”, the implementation details vary greatly. Synology, Asustor, and TerraMaster implement folder-based encryption, while QNAP, Thecus, and Asustor (MyAcrhive) employ full-disk encryption; the full comparison is available here. In this article, we’ll have a look at encryption methods used in TrueNAS, a system commonly used by computer enthusiasts for building custom NAS servers.
👉https://blog.elcomsoft.com/2021/08/nas-forensics-truenas-encryption-overview/
#nas #truenas #encryption