Elcomsoft System Recovery update: enhanced password extraction and account recovery algorithms
We updated Elcomsoft System Recovery, a Windows PE-based tool to recover or reset passwords to local Windows accounts and Microsoft accounts in all versions of Windows. Elcomsoft System Recovery now utilizes an enhanced, smarter and significantly more efficient algorithms for recovering account passwords.
👉 https://www.elcomsoft.com/news/742.html
#cybersecurity #passwords #fde #windows #encryption #diskencryption #datasecurity #itsecurity
We updated Elcomsoft System Recovery, a Windows PE-based tool to recover or reset passwords to local Windows accounts and Microsoft accounts in all versions of Windows. Elcomsoft System Recovery now utilizes an enhanced, smarter and significantly more efficient algorithms for recovering account passwords.
👉 https://www.elcomsoft.com/news/742.html
#cybersecurity #passwords #fde #windows #encryption #diskencryption #datasecurity #itsecurity
Elcomsoft Phone Viewer 5.0 displays Telegram secret chats
Elcomsoft Phone Viewer is updated with support for Telegram conversation histories. Telegram analysis is available when accessing a file system image extracted from the iPhone or iPad device with Elcomsoft iOS Forensic Toolkit by using agent-based or jailbreak-based file system imaging. Experts can now decrypt and analyse the complete Telegram communication histories including secure chats when analysing the results of iOS file system acquisition.
👉 https://www.elcomsoft.com/news/743.html
📝 Release Notes
#telegram #signal #ios #iphone #mobileforensics #itsecurity #secretchats #datasecurity
Elcomsoft Phone Viewer is updated with support for Telegram conversation histories. Telegram analysis is available when accessing a file system image extracted from the iPhone or iPad device with Elcomsoft iOS Forensic Toolkit by using agent-based or jailbreak-based file system imaging. Experts can now decrypt and analyse the complete Telegram communication histories including secure chats when analysing the results of iOS file system acquisition.
👉 https://www.elcomsoft.com/news/743.html
📝 Release Notes
#telegram #signal #ios #iphone #mobileforensics #itsecurity #secretchats #datasecurity
Extracting Google Dashboard Data
We have updated Elcomsoft Cloud Explorer, our Google Account extraction tool, with Google Dashboard support. The Google Dashboard service is little known among computer forensic specialists since Dashboard data cannot be downloaded from Google or obtained by serving a legal request. Yet, Dashboard aggregates massive amounts of data collected and stored in the user’s Google Account, offering an essential overview of the user’s activities. In this article, we’ll demonstrate how to obtain Dashboard data directly from the user’s Google account.
👉 https://blog.elcomsoft.com/2020/05/extracting-google-dashboard-data/
#google #googleservice #googlecloud #dashboard #gmail #chrome #googlefit #locations #datasecurity #itsecurity #mobilesecurity #dfir
We have updated Elcomsoft Cloud Explorer, our Google Account extraction tool, with Google Dashboard support. The Google Dashboard service is little known among computer forensic specialists since Dashboard data cannot be downloaded from Google or obtained by serving a legal request. Yet, Dashboard aggregates massive amounts of data collected and stored in the user’s Google Account, offering an essential overview of the user’s activities. In this article, we’ll demonstrate how to obtain Dashboard data directly from the user’s Google account.
👉 https://blog.elcomsoft.com/2020/05/extracting-google-dashboard-data/
#google #googleservice #googlecloud #dashboard #gmail #chrome #googlefit #locations #datasecurity #itsecurity #mobilesecurity #dfir
Google Account Access Without a Password
Cloud acquisition is one of the most common ways to obtain valuable evidence. When it comes to Google, the Google Account analysis may return significantly more data compared to the extraction of a physical Android device. However, there is one feature that is often overlooked: the ability to extract data stored in the user’s Google Account without the login and password. Let’s talk about Google authentication tokens and what they bring for the mobile forensics.
👉 https://blog.elcomsoft.com/2020/05/google-account-access-without-a-password/
#google #password #token #authentication #dataaccess #datasecurity #itsecurity #mobileforensics #cloudsecurity
Cloud acquisition is one of the most common ways to obtain valuable evidence. When it comes to Google, the Google Account analysis may return significantly more data compared to the extraction of a physical Android device. However, there is one feature that is often overlooked: the ability to extract data stored in the user’s Google Account without the login and password. Let’s talk about Google authentication tokens and what they bring for the mobile forensics.
👉 https://blog.elcomsoft.com/2020/05/google-account-access-without-a-password/
#google #password #token #authentication #dataaccess #datasecurity #itsecurity #mobileforensics #cloudsecurity
Tighter Control over Personal Information with Attacks on Encryption Metadata
When attacking a password, the traditional forensic workflow requires uploading the entire encrypted file or document into a password recovery tool. This approach, while simple and intuitive, has one major drawback if you are using remote computers or cloud instances to perform an attack. If the remote computer is compromised, the entire file or document is leaked complete with its (still encrypted) contents. Learn how to overcome this issue and perform remote attacks without the reason of leaking personal information.
Encryption Metadata
The solution to the problem is obvious: use just the required minimum of information to run the attack. In the case of document passwords, this means...
👉 https://blog.elcomsoft.com/2020/05/tighter-control-over-personal-information-with-attacks-on-encryption-metadata/
#hashextractor #passwords #itsecurity #computersecurity #datasecurity #digitalforensics #dfir #cloudcomputing
When attacking a password, the traditional forensic workflow requires uploading the entire encrypted file or document into a password recovery tool. This approach, while simple and intuitive, has one major drawback if you are using remote computers or cloud instances to perform an attack. If the remote computer is compromised, the entire file or document is leaked complete with its (still encrypted) contents. Learn how to overcome this issue and perform remote attacks without the reason of leaking personal information.
Encryption Metadata
The solution to the problem is obvious: use just the required minimum of information to run the attack. In the case of document passwords, this means...
👉 https://blog.elcomsoft.com/2020/05/tighter-control-over-personal-information-with-attacks-on-encryption-metadata/
#hashextractor #passwords #itsecurity #computersecurity #datasecurity #digitalforensics #dfir #cloudcomputing
Researching Confide Messenger Encryption
iPhone users have access to literally hundreds of instant messaging apps. These apps range all the way from the built-in iMessage app to the highly secure Signal messengers, with all stops in between. Many of the messaging apps are marketed as ‘secure’ or ‘protected’ messengers, touting end-to-end encryption and zero retention policies. We routinely verify such claims by analyzing the security of various instant messaging apps. It turned out that the degree of protection can vary greatly, having little to do with the developers’ claims. Today we’ll check out Confide, a tool advertising unprecedented level of security.
👉 https://blog.elcomsoft.com/2020/06/researching-confide-messenger-encryption/
#confide #cybersec #mobileforensics #dfir #smartphone #iphone #messenger #datasecurity
iPhone users have access to literally hundreds of instant messaging apps. These apps range all the way from the built-in iMessage app to the highly secure Signal messengers, with all stops in between. Many of the messaging apps are marketed as ‘secure’ or ‘protected’ messengers, touting end-to-end encryption and zero retention policies. We routinely verify such claims by analyzing the security of various instant messaging apps. It turned out that the degree of protection can vary greatly, having little to do with the developers’ claims. Today we’ll check out Confide, a tool advertising unprecedented level of security.
👉 https://blog.elcomsoft.com/2020/06/researching-confide-messenger-encryption/
#confide #cybersec #mobileforensics #dfir #smartphone #iphone #messenger #datasecurity
iOS Extraction Without a Jailbreak: Full iOS 10 Support
One is hardly likely to encounter an iOS 10 in the wild, however forensic labs still process devices running the older version of the OS. In today's update of Elcomsoft iOS Forensic Toolkit, we’ve brought support for jailbreak-free extraction back to the roots, adding support for the oldest version of iOS capable of running on the iPhone 7 generation of devices.
Let’s see what it takes to extract an older iPhone without a jailbreak!
Keep reading: https://blog.elcomsoft.com/2020/06/ios-extraction-without-a-jailbreak-full-ios-10-support/
#ios10 #iphone7 #dfir #mobileforensics #datasecurity #infosec #extractionagent
One is hardly likely to encounter an iOS 10 in the wild, however forensic labs still process devices running the older version of the OS. In today's update of Elcomsoft iOS Forensic Toolkit, we’ve brought support for jailbreak-free extraction back to the roots, adding support for the oldest version of iOS capable of running on the iPhone 7 generation of devices.
Let’s see what it takes to extract an older iPhone without a jailbreak!
Keep reading: https://blog.elcomsoft.com/2020/06/ios-extraction-without-a-jailbreak-full-ios-10-support/
#ios10 #iphone7 #dfir #mobileforensics #datasecurity #infosec #extractionagent
The ABC’s of Password Cracking: The True Meaning of Speed
When adding a new encryption format or comparing the performance of different password recovery tools, we routinely quote the recovery speed expressed in the number of passwords per second. But what is the true meaning of password recovery speeds? Do the speeds depend solely, or at all, on the encryption algorithm? What’s “military grade” encryption, and does it guarantee the security of your data? And why on Earth breaking AES-256 encryption takes so vastly different effort in different file formats? Read along to find out.
👉 https://blog.elcomsoft.com/2020/11/the-abcs-of-password-cracking-the-true-meaning-of-speed/
#passwords #passwordrecovery #dfir #digitalforensics #datasecurity #dataaccess
When adding a new encryption format or comparing the performance of different password recovery tools, we routinely quote the recovery speed expressed in the number of passwords per second. But what is the true meaning of password recovery speeds? Do the speeds depend solely, or at all, on the encryption algorithm? What’s “military grade” encryption, and does it guarantee the security of your data? And why on Earth breaking AES-256 encryption takes so vastly different effort in different file formats? Read along to find out.
👉 https://blog.elcomsoft.com/2020/11/the-abcs-of-password-cracking-the-true-meaning-of-speed/
#passwords #passwordrecovery #dfir #digitalforensics #datasecurity #dataaccess
Forensically Sound Cold System Analysis
As opposed to live system analysis, experts performing the cold analysis are not dealing with authenticated user sessions. Instead, cold analysis can be viewed as an intermediary measure with live system analysis on the one end and the examination of a forensic disk image on another. Why and when would you use cold system analysis, what can you do and what benefits does it bring compared to the traditional approach? Read along to find out.
👉 https://blog.elcomsoft.com/2020/12/forensically-sound-cold-system-analysis/
#dfir #datasecurity #encryption #windows #itsecurity
As opposed to live system analysis, experts performing the cold analysis are not dealing with authenticated user sessions. Instead, cold analysis can be viewed as an intermediary measure with live system analysis on the one end and the examination of a forensic disk image on another. Why and when would you use cold system analysis, what can you do and what benefits does it bring compared to the traditional approach? Read along to find out.
👉 https://blog.elcomsoft.com/2020/12/forensically-sound-cold-system-analysis/
#dfir #datasecurity #encryption #windows #itsecurity
Elcomsoft vs. Hashcat Part 3: Attacks, Costs, Performance and Extra Features
Elcomsoft Distributed Password Recovery and Hashcat support a number of different attacks ranging from brute-force all the way to scriptable, dictionary-based attacks. The costs and performance are extremely important factors. We charge several hundred dollars for what, in the end, can be done with a free tool. Which tool has better performance, and are the extra features worth the price premium? Let’s check it out.
👉 https://blog.elcomsoft.com/2020/12/elcomsoft-vs-hashcat-part-3-attacks-costs-performance-and-extra-features/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery
Elcomsoft Distributed Password Recovery and Hashcat support a number of different attacks ranging from brute-force all the way to scriptable, dictionary-based attacks. The costs and performance are extremely important factors. We charge several hundred dollars for what, in the end, can be done with a free tool. Which tool has better performance, and are the extra features worth the price premium? Let’s check it out.
👉 https://blog.elcomsoft.com/2020/12/elcomsoft-vs-hashcat-part-3-attacks-costs-performance-and-extra-features/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery
NAS Forensics: QNAP Encryption Analysis
A year ago, we analyzed the encryption used in Synology NAS devices. We were somewhat disappointed by the company’s choice to rely on a single encryption layer with multiple functional restrictions and security reservations. Today we are publishing the results of our analysis of data encryption used in QNAP devices. Spoiler: it’s very, very different.
👉 https://blog.elcomsoft.com/2020/12/nas-forensics-qnap-encryption-analysis/
#nas #encryption #datasecurity #dataprotection #sedencryption
A year ago, we analyzed the encryption used in Synology NAS devices. We were somewhat disappointed by the company’s choice to rely on a single encryption layer with multiple functional restrictions and security reservations. Today we are publishing the results of our analysis of data encryption used in QNAP devices. Spoiler: it’s very, very different.
👉 https://blog.elcomsoft.com/2020/12/nas-forensics-qnap-encryption-analysis/
#nas #encryption #datasecurity #dataprotection #sedencryption
Understanding BitLocker TPM Protection
Investigating a BitLocker-encrypted hard drive can be challenging, especially if the encryption keys are protected by the computer’s hardware protection, the TPM. In this article, we’ll talk about the protection that TPM chips provide to BitLocker volumes, and discuss vulnerabilities found in today’s TPM modules.
👉 https://blog.elcomsoft.com/2021/01/understanding-bitlocker-tpm-protection/
#tpm #encryption #datasecurity #bitlocker
Investigating a BitLocker-encrypted hard drive can be challenging, especially if the encryption keys are protected by the computer’s hardware protection, the TPM. In this article, we’ll talk about the protection that TPM chips provide to BitLocker volumes, and discuss vulnerabilities found in today’s TPM modules.
👉 https://blog.elcomsoft.com/2021/01/understanding-bitlocker-tpm-protection/
#tpm #encryption #datasecurity #bitlocker
End-to-End Encryption in Apple iCloud, Google and Microsoft Accounts
The proliferation of always connected, increasingly smart devices had led to a dramatic increase in the amount of highly sensitive information stored in manufacturers’ cloud accounts. Apple, Google, and Microsoft are the three major cloud providers who also develop their own hardware and OS ecosystems. In this report, we’ll see how these companies protect their users’ highly sensitive information compared to each other.
👉 https://blog.elcomsoft.com/2021/01/end-to-end-encryption-in-apple-icloud-google-and-microsoft-accounts/
#e2ee #icloud #google #microsoftaccount #apple #cloudsecurity #datasecurity
The proliferation of always connected, increasingly smart devices had led to a dramatic increase in the amount of highly sensitive information stored in manufacturers’ cloud accounts. Apple, Google, and Microsoft are the three major cloud providers who also develop their own hardware and OS ecosystems. In this report, we’ll see how these companies protect their users’ highly sensitive information compared to each other.
👉 https://blog.elcomsoft.com/2021/01/end-to-end-encryption-in-apple-icloud-google-and-microsoft-accounts/
#e2ee #icloud #google #microsoftaccount #apple #cloudsecurity #datasecurity
Elcomsoft System Recovery Simplifies Digital Field Triage and In-Field Investigations
Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.
👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.
👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
Digital Triage Forensics: Write-Blocking, Verifiable Disk Imaging
When accessing a locked system during an in-field investigation, speed is often the most important factor. However, maintaining digital chain of custody is just as if not more important in order to produce court admissible evidence. We are introducing new features in Elcomsoft System Recovery, our forensic triage tool, to help establish and maintain digital chain of custody throughout the investigation.
👉 https://blog.elcomsoft.com/2021/11/digital-triage-forensics-write-blocking-verifiable-disk-imaging/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics
When accessing a locked system during an in-field investigation, speed is often the most important factor. However, maintaining digital chain of custody is just as if not more important in order to produce court admissible evidence. We are introducing new features in Elcomsoft System Recovery, our forensic triage tool, to help establish and maintain digital chain of custody throughout the investigation.
👉 https://blog.elcomsoft.com/2021/11/digital-triage-forensics-write-blocking-verifiable-disk-imaging/
#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics