In previous versions of Forensic Disk Decryptor, the toolkit was limited to mounting or decrypting volumes using the binary cryptographic keys extracted from the computer’s memory image or hibernation file. Integrated Solution for Accessing Encrypted Volumes In addition, a kernel-level memory dumping tool is now supplied with the toolkit, allowing experts to image computer’s RAM on Windows computers. The updated toolkit gains the ability to mount or decrypt encrypted volumes using plain text passwords, escrow keys, or cryptographic keys extracted from the computer’s volatile memory image. In its first major update, Elcomsoft Forensic Disk Decryptor 2.0 becomes a fully integrated, all-in-one solution for accessing encrypted FileVault 2, BitLocker, PGP and TrueCrypt volumes. Elcomsoft Forensic Disk Decryptor comes with a built-in memory dumping tool, allowing experts to image computer’s RAM.
Elcomsoft Forensic Disk Decryptor receives a major update, gaining the ability to mount or decrypt encrypted containers using their respective passwords, escrow keys, or cryptographic keys extracted from the computer’s volatile memory image.