ElcomSoft Co. Ltd.: Forensic Disk Decryptor 2.0 Provides All in One Solution for Accessing Encrypted Volumes

MOSCOW, Jan. 31, 2018 /PRNewswire/ -- ElcomSoft Co. Ltd. updates Elcomsoft Forensic Disk Decryptor, a forensic tool for extracting information from encrypted volumes. The toolkit becomes an integrated solution for accessing encrypted FileVault 2, PGP, BitLocker and TrueCrypt. The update can mount or decrypt encrypted volumes using plain text passwords, escrow keys, or cryptographic keys extracted from the computer's memory image. A Microsoft-signed kernel-level memory dumping tool is now available, allowing experts imaging Windows computers' RAM.

Read How to Instantly Access BitLocker, TrueCrypt, PGP and FileVault 2 Volumes 

Integrated Solution for Accessing Encrypted Volumes

In previous versions, the toolkit was limited to accessing volumes with binary cryptographic keys extracted from the computer's memory image or hibernation file. The ability to use plain-text passwords or escrow keys for accessing data stored in the encrypted containers was sorely missing.

Elcomsoft Forensic Disk Decryptor 2.0 adds the ability to access encrypted volumes with plain-text passwords, escrow or recovery keys. FileVault 2 recovery keys can be extracted from iCloud with Elcomsoft Phone Breaker, while BitLocker recovery keys are available in Active Directory or in the user's Microsoft Account.

Built-In Kernel Level Memory Dumping Tool

Elcomsoft Forensic Disk Decryptor scans memory images for cryptographic keys used to decrypt data in encrypted containers. Earlier versions relied on memory images created with other tools. A forensic-grade memory imaging tool is now included, using zero-level access to create a full memory image. The tool works in kernel mode and carries a Microsoft digital signature for full compatibility with all 32-bit and 64-bit versions of Windows including Windows 10 Fall Creators Update.

About Elcomsoft Forensic Disk Decryptor

Elcomsoft Forensic Disk Decryptor provides instant access with on-the-fly decryption of encrypted data stored in popular crypto containers. Supporting desktop and portable versions of BitLocker, PGP and TrueCrypt, the tool can either decrypt all files and folders stored in a crypto container or mount the encrypted volume as new drive letter for instant access.

Pricing and Availability

Elcomsoft Forensic Disk Decryptor is available immediately. North American prices start from $599 with a 30% introductory discount available until February 28, 2018. Local pricing varies.

About ElcomSoft

Founded in 1990, ElcomSoft Co.Ltd. develops computer forensics tools, provides computer forensics training and computer evidence consulting services. ElcomSoft has been providing support to businesses, law enforcement, military, and intelligence agencies. ElcomSoft tools are used by Fortune 500 corporations, governments, and major accounting firms.

SOURCE ELCOMSOFT Co. Ltd.