ElcomSoft has updated Elcomsoft System Recovery for Desktop Forensics, a bootable tool for unlocking Windows accounts, accessing encrypted volumes, and unlocking encrypted virtual machines.
The new features that help investigators find encrypted virtual machines and map hard drives by booting from a USB drive make Elcomsoft System Recovery a Swiss army knife for digital desktop forensics.
Virtual machines as obfuscation tool
In the world of high tech crime, encrypted virtual machines are an often used obfuscation tool. Manually identifying such virtual machines can be a laborious manual process. Elcomsoft System Recovery 7.07 simplifies this process by automatically detecting encrypted virtual machines in most popular formats. As soon as a password-protected virtual machine is found, the tool extracts the necessary encryption metadata to enable subsequent attacks on the password with Elcomsoft Distributed Password Recovery.
Disk imaging for desktop forensics
Experts who investigate digital incidents use disk images instead of physical disks for a number of reasons. In the current workflow, the hard disks are removed before the hard disk imaging, which can significantly extend the examination. Elcomsoft System Recovery makes it easy to create forensic disk images by mapping the suspect's hard drives without removing them from the computer, eliminating the risks associated with investigating a live system.
Elcomsoft System Recovery 7.07 offers a variety of functions that can be used to make the recovery of various passwords more efficient. The new version can extract security questions and answers as well as password hints in the latest format from local Windows accounts for subsequent analysis. The underlying Windows PE environment has also been updated to provide support for the latest hardware and security updates.
More on this at ElcomSoft.de
About ElcomSoft
The software development company ElcomSoft Co. Ltd. was founded in 1990 by Alexander Katalov and has been in his possession ever since. The Moscow-based company specializes in proactive password security software for businesses and private users and sells its products worldwide. ElcomSoft aims to provide users with easy-to-use password recovery solutions to access their data. The software company also provides administrators with security solutions with which they can locate and eliminate unsafe identifiers in company networks under Windows or rescue EFS-encrypted files.