Elcomsoft adds support for BestCrypt Volume Encryption 5

Elcomsoft updates its range of solutions for distributed, hardware-accelerated password recovery and data decryption, adding support for yet another popular full disk encryption product: BestCrypt Volume Encryption.

👉 https://www.elcomsoft.com/news/802.html

#bestcrypt #encryption #edpr #efdd #esr

Elcomsoft System Recovery 8.20 adds Windows 11 support, bootable triage tools

Elcomsoft System Recovery, a digital field triage tool, is updated to support Windows 11 and Windows Server 2022 installations and adds a host of bootable forensic triage tools to help experts analyze computer systems in the field.

👉 https://www.elcomsoft.com/news/809.html

📝 Release Notes

#esr #forensictriage #windows11 #dfir #digitalforensics

Simplifying Digital Triage with Bootable Forensic Tools

Elcomsoft System Recovery speeds up in-field investigations by providing experts with a forensic tool they can use by booting a PC from a dedicated USB media. The recent update extended the functionality of the tool by adding three new forensic tools.

👉 https://blog.elcomsoft.com/2022/03/simplifying-digital-triage-with-bootable-forensic-tools/

#esr #dfir #computerforensics #forensictriage

Windows 11 TPM Protection, Passwordless Sign-In and What You Can Do About Them

Windows 11 introduces increased account protection, passwordless sign-in and hardware-based security. What has been changed compared to Windows 10, how these changes affect forensic extraction and analysis, and to what extent can one overcome the TPM-based protection? Read along to find out!

👉 https://blog.elcomsoft.com/2022/03/windows-11-tpm-protection-passwordless-sign-in-and-what-you-can-do-about-them/

#esr #bitlocker #microsoftaccount #systemrecovery #tpm

Elcomsoft System Recovery 8.30 recovers PIN-protected Windows accounts, supports LUKS2 encryption

Elcomsoft System Recovery, a digital field triage tool, is updated to support PIN-protected Windows 10 and Windows 11 accounts with in-place PIN recovery. The update adds LUKS2 support, detects Microsoft Azure accounts, and improves bootable forensic tools with custom filters.

📝 Release notes (PDF)

👉 https://www.elcomsoft.com/news/819.html

#ESR #Windows #MicrosoftAzure #LUKS2

New in Elcomsoft System Recovery: Microsoft Azure Accounts, LUKS2 and Forensic Tool Filters

Elcomsoft System Recovery 8.30 introduced the ability to break Windows Hello PIN codes on TPM-less computers. This, however, was just one of the many new features added to the updated release. Other features include the ability to detect Microsoft Azure accounts and LUKS2 encryption, as well as new filters for bootable forensic tools.

👉 https://blog.elcomsoft.com/2022/08/new-in-elcomsoft-system-recovery-microsoft-azure-accounts-luks2-and-forensic-tool-filters/

#ESR #Windows11 #Windows10 #MicrosoftAzure #LUKS2

Windows Hello: No TPM No Security

While Windows 11 requires a Trusted Platform Module (TPM), older versions of Windows can do without while still using PIN-based Windows Hello sign-in. We prove that all-digit PINs are a serious security risk on systems without a TPM, and can be broken in a matter of minutes.

👉 https://blog.elcomsoft.com/2022/08/windows-hello-no-tpm-no-security/

#esr #Windows10 #Windows11 #TPM #edpr #WindowsHello

Accelerating digital forensics: Elcomsoft System Recovery boosts efficiency in forensic analysis

Elcomsoft System Recovery, a bootable forensic analysis tool for Windows, receives an update that introduces several new features designed to enhance efficiency and simplicity during in-field investigations. The updated tool enables the collection, extraction, and analysis of essential artifacts available on the computers being investigated.

👉 https://www.elcomsoft.com/news/841.html

#ESR #Windows #DFIR #digitalforensics

Accelerating Computer Forensics: Elcomsoft System Recovery and the Low-Hanging Fruit Strategy

In the world of digital investigations, the sheer volume of data and the challenge of identifying valuable evidence can be overwhelming. Often, investigators find themselves faced with the need for optimization — the ability to quickly and seamlessly identify what is valuable and requires further examination. We aim to fulfill this need by introducing a new forensic toolkit in Elcomsoft System Recovery, a powerful bootable tool designed to speed up investigations, quickly identify and collect digital evidence right on the spot. 🔥

👉 https://blog.elcomsoft.com/2023/07/accelerating-computer-forensics-elcomsoft-system-recovery-and-the-low-hanging-fruit-strategy/

#ESR #Windows #DFIR #digitalforensics

Forensically Sound Cold System Analysis

In the world of digital forensics, there are various ways to analyze computer systems. You might be familiar live system analysis or investigating forensic disk images, but there’s yet another method called cold system analysis. Unlike live analysis where experts deal with active user sessions, cold system analysis works differently. It’s like a middle ground between live analysis and examining saved images of a computer’s storage. But why and when would someone use cold analysis? What can you do with it, and how does it compare to the usual methods?

👉🏻 https://blog.elcomsoft.com/2024/01/forensically-sound-cold-system-analysis/

#EDPR #EFDD #ESR #dfir