Elcomsoft System Recovery update: enhanced password extraction and account recovery algorithms
We updated Elcomsoft System Recovery, a Windows PE-based tool to recover or reset passwords to local Windows accounts and Microsoft accounts in all versions of Windows. Elcomsoft System Recovery now utilizes an enhanced, smarter and significantly more efficient algorithms for recovering account passwords.
👉 https://www.elcomsoft.com/news/742.html
#cybersecurity #passwords #fde #windows #encryption #diskencryption #datasecurity #itsecurity
We updated Elcomsoft System Recovery, a Windows PE-based tool to recover or reset passwords to local Windows accounts and Microsoft accounts in all versions of Windows. Elcomsoft System Recovery now utilizes an enhanced, smarter and significantly more efficient algorithms for recovering account passwords.
👉 https://www.elcomsoft.com/news/742.html
#cybersecurity #passwords #fde #windows #encryption #diskencryption #datasecurity #itsecurity
Elcomsoft adds LUKS encryption support
We updated Elcomsoft Forensic Disk Decryptor, Elcomsoft System Recovery and Elcomsoft Distributed Password Recovery with support for Linux partitions protected with LUKS encryption. The tools work together to identify encrypted partitions, extract encryption metadata and launch a full-scale, GPU-accelerated attack on the encryption password.
📝 Release Notes (PDF)
👉 https://www.elcomsoft.com/news/760.html
#LUKS #Linux #fde #diskencryption #cryptocontainer #forensictools #passwords #passwordrecovery
We updated Elcomsoft Forensic Disk Decryptor, Elcomsoft System Recovery and Elcomsoft Distributed Password Recovery with support for Linux partitions protected with LUKS encryption. The tools work together to identify encrypted partitions, extract encryption metadata and launch a full-scale, GPU-accelerated attack on the encryption password.
📝 Release Notes (PDF)
👉 https://www.elcomsoft.com/news/760.html
#LUKS #Linux #fde #diskencryption #cryptocontainer #forensictools #passwords #passwordrecovery
Forensic Disk Decryptor 2.18 extracts VeraCrypt on-the-fly encryption keys
Elcomsoft Forensic Disk Decryptor is updated to support RAM imaging and extraction of on-the-fly encryption keys in recent versions of VeraCrypt, the most popular TrueCrypt successor. The keys are extracted for all encryption configurations.
👉 https://www.elcomsoft.com/news/787.html
📝 Release Notes (PDF)
#veracrypt #diskencryption #desktopforensic #digitalsecurity
Elcomsoft Forensic Disk Decryptor is updated to support RAM imaging and extraction of on-the-fly encryption keys in recent versions of VeraCrypt, the most popular TrueCrypt successor. The keys are extracted for all encryption configurations.
👉 https://www.elcomsoft.com/news/787.html
📝 Release Notes (PDF)
#veracrypt #diskencryption #desktopforensic #digitalsecurity
Breaking VeraCrypt: Obtaining and Extracting On-The-Fly Encryption Keys
Released back in 2013, VeraCrypt picks up where TrueCrypt left off. Supporting more encryption algorithms, more hash functions and a variable number of hash iterations, VeraCrypt is the default choice for the security conscious. VeraCrypt has no known weaknesses except one: once the encrypted disk is mounted, the symmetric, on-the-fly encryption key must be kept in the computer’s RAM in order to read and write encrypted data. A recent change in VeraCrypt made OTF key extraction harder, while the latest update to Elcomsoft Forensic Disk Decryptor attempts to counter the effect of the change. Who is going to win this round?
👉 https://blog.elcomsoft.com/2021/06/breaking-veracrypt-obtaining-and-extracting-on-the-fly-encryption-keys/
#veracrypt #diskencryption #fde #otfekeys #truecrypt
Released back in 2013, VeraCrypt picks up where TrueCrypt left off. Supporting more encryption algorithms, more hash functions and a variable number of hash iterations, VeraCrypt is the default choice for the security conscious. VeraCrypt has no known weaknesses except one: once the encrypted disk is mounted, the symmetric, on-the-fly encryption key must be kept in the computer’s RAM in order to read and write encrypted data. A recent change in VeraCrypt made OTF key extraction harder, while the latest update to Elcomsoft Forensic Disk Decryptor attempts to counter the effect of the change. Who is going to win this round?
👉 https://blog.elcomsoft.com/2021/06/breaking-veracrypt-obtaining-and-extracting-on-the-fly-encryption-keys/
#veracrypt #diskencryption #fde #otfekeys #truecrypt
Forensic Implications of Sleep, Hybrid Sleep, Hibernation, and Fast Startup in Windows 10
When analyzing connected computers, one may be tempted to pull the plug and bring the PC to the lab for in-depth research. This strategy carries risks that may overweigh the benefits. In this article we’ll discuss what exactly you may be losing when pulling the plug.
👉 https://blog.elcomsoft.com/2021/09/forensic-implications-of-sleep-hybrid-sleep-hibernation-and-fast-startup-in-windows-10/
#windows10 #bitlocker #diskencryption #truecrypt
When analyzing connected computers, one may be tempted to pull the plug and bring the PC to the lab for in-depth research. This strategy carries risks that may overweigh the benefits. In this article we’ll discuss what exactly you may be losing when pulling the plug.
👉 https://blog.elcomsoft.com/2021/09/forensic-implications-of-sleep-hybrid-sleep-hibernation-and-fast-startup-in-windows-10/
#windows10 #bitlocker #diskencryption #truecrypt
Elcomsoft Distributed Password Recovery 4.45 supports Windows Hello PIN codes and LUKS2 encryption
We updated Elcomsoft Distributed Password Recovery and Elcomsoft Forensic Disk Decryptor with support for LUKS2, an updated version of Linux disk encryption tool. The tools work together to extract encryption metadata and launch a password recovery attack. In addition, Elcomsoft Distributed Password Recovery can now break PIN codes protecting Windows accounts on TPM-less systems.
📝 Release notes (PDF)
👉 https://www.elcomsoft.com/news/820.html
#LUKS2 #Windows11 #EDPR #EFDD #diskencryption #pincode #dfir
We updated Elcomsoft Distributed Password Recovery and Elcomsoft Forensic Disk Decryptor with support for LUKS2, an updated version of Linux disk encryption tool. The tools work together to extract encryption metadata and launch a password recovery attack. In addition, Elcomsoft Distributed Password Recovery can now break PIN codes protecting Windows accounts on TPM-less systems.
📝 Release notes (PDF)
👉 https://www.elcomsoft.com/news/820.html
#LUKS2 #Windows11 #EDPR #EFDD #diskencryption #pincode #dfir
❤1
Probing Linux Disk Encryption: LUKS2, Argon 2 and GPU Acceleration
Disk encryption is widely used desktop and laptop computers. Many non-ZFS Linux distributions rely on LUKS for data protection. LUKS is a classic implementation of disk encryption offering the choice of encryption algorithms, encryption modes and hash functions. LUKS2 further improves the already tough disk encryption. Learn how to deal with LUKS2 encryption in Windows and how to break in with distributed password attacks.
👉 https://blog.elcomsoft.com/2022/08/probing-linux-disk-encryption-luks2-argon-2-and-gpu-acceleration/
#LUKS2 #EDPR #EFDD #diskencryption #dfir
Disk encryption is widely used desktop and laptop computers. Many non-ZFS Linux distributions rely on LUKS for data protection. LUKS is a classic implementation of disk encryption offering the choice of encryption algorithms, encryption modes and hash functions. LUKS2 further improves the already tough disk encryption. Learn how to deal with LUKS2 encryption in Windows and how to break in with distributed password attacks.
👉 https://blog.elcomsoft.com/2022/08/probing-linux-disk-encryption-luks2-argon-2-and-gpu-acceleration/
#LUKS2 #EDPR #EFDD #diskencryption #dfir
Volume Encryption in Synology DSM 7.2: LUKS with Questionable Key Management
Synology DSM 7.2 introduced a highly anticipated feature: volume-level encryption. This data protection mechanism works faster and has less limitations than shared folder encryption, which was the only encryption option supported in prior DSM releases. However, upon investigation, we determined that the implementation of the encryption key management mechanism for full-volume encryption fails to meet the expected standards of security for encrypted data for many users.
In this article, we will explore the current implementation of encrypted volumes in DSM 7.2 and shed light on the challenges posed by the existing key vault design.
👉 https://blog.elcomsoft.com/2023/06/volume-encryption-in-synology-dsm-7-2-luks-with-questionable-key-management/
#diskencryption #LUKS #NAS #Synology
Synology DSM 7.2 introduced a highly anticipated feature: volume-level encryption. This data protection mechanism works faster and has less limitations than shared folder encryption, which was the only encryption option supported in prior DSM releases. However, upon investigation, we determined that the implementation of the encryption key management mechanism for full-volume encryption fails to meet the expected standards of security for encrypted data for many users.
In this article, we will explore the current implementation of encrypted volumes in DSM 7.2 and shed light on the challenges posed by the existing key vault design.
👉 https://blog.elcomsoft.com/2023/06/volume-encryption-in-synology-dsm-7-2-luks-with-questionable-key-management/
#diskencryption #LUKS #NAS #Synology
Safeguarding Digital Evidence: Don’t Shut It Down!
In the digital age, where information is a precious commodity and evidence is increasingly stored in virtual realms, the importance of preserving digital evidence has become a must in modern investigative practices. However, the criticality of proper handling is often overlooked, potentially jeopardizing access to crucial data during an investigation. In this article, we will once again highlight the importance of meticulous preservation techniques and live session analysis to prevent the loss of digital evidence.
👉 https://blog.elcomsoft.com/2023/06/safeguarding-digital-evidence-dont-shut-it-down/
#DFIR #diskencryption #livesystemanalysis
In the digital age, where information is a precious commodity and evidence is increasingly stored in virtual realms, the importance of preserving digital evidence has become a must in modern investigative practices. However, the criticality of proper handling is often overlooked, potentially jeopardizing access to crucial data during an investigation. In this article, we will once again highlight the importance of meticulous preservation techniques and live session analysis to prevent the loss of digital evidence.
👉 https://blog.elcomsoft.com/2023/06/safeguarding-digital-evidence-dont-shut-it-down/
#DFIR #diskencryption #livesystemanalysis