Elcomsoft
547 subscribers
573 photos
1 video
1 file
458 links
Elcomsoft official channel is the place where you can find news, events and the latest updates of our products.

website: elcomsoft.com
twitter: twitter.com/elcomsoft
youtube: youtube.com/c/ElcomsoftCompany
blog: blog.elcomsoft.com
t.me/elcomsoftru
Download Telegram
Breaking VeraCrypt: Obtaining and Extracting On-The-Fly Encryption Keys

Released back in 2013, VeraCrypt picks up where TrueCrypt left off. Supporting more encryption algorithms, more hash functions and a variable number of hash iterations, VeraCrypt is the default choice for the security conscious. VeraCrypt has no known weaknesses except one: once the encrypted disk is mounted, the symmetric, on-the-fly encryption key must be kept in the computer’s RAM in order to read and write encrypted data. A recent change in VeraCrypt made OTF key extraction harder, while the latest update to Elcomsoft Forensic Disk Decryptor attempts to counter the effect of the change. Who is going to win this round?

👉 https://blog.elcomsoft.com/2021/06/breaking-veracrypt-obtaining-and-extracting-on-the-fly-encryption-keys/

#veracrypt #diskencryption #fde #otfekeys #truecrypt
ElcomSoft adds OneDrive, Microsoft Timeline extraction

Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, adding the ability to download OneDrive files and activities from the Windows 10 Timeline. Elcomsoft Phone Viewer is also updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.

👉 https://www.elcomsoft.com/news/788.html

#mobileforensics #onedrive #personalvault #windowstimeline #phonebreaker
Analyzing Microsoft Timeline, OneDrive and Personal Vault Files

Elcomsoft Phone Breaker is not just about Apple iCloud data. It can also download the data from other cloud services including Microsoft accounts. In this new version, we have added support for even more types of data, including Windows 10 Timeline, Account Activity (logins to the account), OneDrive files, recent OneDrive files history, and files from Microsoft Personal Vault. Learn about these data types and how they can help advance your investigation.

👉 https://blog.elcomsoft.com/2021/06/analyzing-microsoft-timeline-onedrive-and-personal-vault-files/

#cloudsecurity #onedrive #personalvault #microsofttimeline #phonebreaker
Elcomsoft System Recovery update simplifies digital field triage

Elcomsoft System Recovery, a digital field triage tool, receives an update. The tool adds the ability to extract Wi-Fi passwords and helps identify the owner of the computer being examined by extracting its Windows license key. In addition, file system analysis is made easier with an embedded two-panel file manager.

📝 Release notes (PDF)

👉 https://www.elcomsoft.com/news/789.html

#esr #wifipassword #licensekey #dfir #digitalforensics #encryption #windows
Elcomsoft System Recovery Simplifies Digital Field Triage and In-Field Investigations

Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.

👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/

#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
How to Remove Restrictions from Adobe PDF Files

Have you got an Adobe PDF file that you can open but cannot edit, print or copy selected text to the clipboard? There is an easy solution: with just a couple of clicks, the file can be unprotected. Bad news: you’ll need software. Good news: we’ve built one for you.

👉 https://blog.elcomsoft.com/2021/07/how-to-remove-restrictions-from-adobe-pdf-files/

#pdf #adobe #apdfpr #PDFRestrictions
Elcomsoft Phone Viewer 5.31 update previews OneDrive deleted files metadata

Elcomsoft Phone Viewer gains the ability to preview metadata for files deleted from OneDrive prior to restoring the files. In addition, the update fixes the issue with Skype attachments.

👉 https://www.elcomsoft.com/news/790.html

#onedrive #phoneviewer #mobileforensics
iOS Forensic Toolkit 7.02 simplifies macOS installations, fixes corrupted file system extraction

Elcomsoft iOS Forensic Toolkit 7.02 is a minor update making it easier to install the tool on macOS computers and introducing a new agent extraction option to fix the extraction of corrupted file systems.

👉 https://www.elcomsoft.com/news/791.html

#ios #mobileforensics #macOS #filesystem
Updated Elcomsoft iOS Forensic Toolkit Simplifies macOS Installs, Fixes Corrupted File System Extraction

While we are still working on the new version of Elcomsoft iOS Forensic Toolkit featuring forensically sound and nearly 100% compatible checkm8 extraction, an intermediate update is available with two minor yet important improvements. The update makes it easier to install the tool on macOS computers, and introduces a new agent extraction option.

👉 https://blog.elcomsoft.com/2021/07/updated-elcomsoft-ios-forensic-toolkit-simplifies-macos-installs-fixes-corrupted-file-system-extraction/

#ios #mobileforensics #macOS #filesystem
iOS Privacy Protection Tools: Encrypted DNS, iOS 15 Private Relay, Proxy, VPN and TOR

Protecting one’s online privacy is becoming increasingly more important. With ISPs selling their customers’ usage data left and right, and various apps, mail and Web trackers contributing to the pool of “anonymized” data, de-anonimyzation becomes possible with big data analysis. This was clearly demonstrated with the recent event.

Apple did an attempt protecting their users’ location by introducing approximate locations in iOS 14. That change alone makes analyzing aggregate data from iPhone users more difficult but not impossible. In this publication, we compare the tools to protect one’s privacy online while using Apple iOS devices and desktop computers by making one’s browsing activities inaccessible to the middleman.

👉 https://blog.elcomsoft.com/2021/07/ios-privacy-protection-tools-encrypted-dns-ios-15-private-relay-proxy-vpn-and-tor/

#ios #vpn #privacy
Apple Watch Forensics: The Adapters

How do you extract an Apple Watch? While several methods are available, none of them will work if you want to access the device directly without an adapter. There are several different options available on the market, some of them costing north of $200. We tested a large number of such adapters. How do they stand to the marketing claims? In this article, I will share my experience with these adapters.

👉 https://blog.elcomsoft.com/2021/08/apple-watch-forensics-the-adapters/

#applewatch #mobileforensics #dfir #iosforensictoolkit
NAS Forensics: TrueNAS Encryption Overview

Established NAS manufacturers often offer some kind of encryption to their users. While anyone can use “military-grade AES-256 encryption”, the implementation details vary greatly. Synology, Asustor, and TerraMaster implement folder-based encryption, while QNAP, Thecus, and Asustor (MyAcrhive) employ full-disk encryption; the full comparison is available here. In this article, we’ll have a look at encryption methods used in TrueNAS, a system commonly used by computer enthusiasts for building custom NAS servers.

👉https://blog.elcomsoft.com/2021/08/nas-forensics-truenas-encryption-overview/

#nas #truenas #encryption
iOS 15 Forensic Implications: Temporary iCloud Backups

One of the main problems of iCloud forensics (unknown account passwords aside) is the sporadic nature of cloud backups. Experts often find out that a given user either does not have device backups in their iCloud account at all, or only has a very old backup. This happens primarily because of Apple’s policy of only granting 5GB of storage to the users of the free tier. While users can purchase additional storage for mere 99 cents a months, very few do so. iCloud Photos, downloads and other data quickly fill up the allotted storage space, leaving no space for a fresh cloud backup.

👉 https://blog.elcomsoft.com/2021/08/ios-15-forensic-implications-temporary-icloud-backups/

#ios #mobileforensics #icloud #cloudforensics #iphone