Elcomsoft Forensic Disk Decryptor – offers all available methods for gaining access to information stored in encrypted BitLocker, FileVault 2, PGP, TrueCrypt and VeraCrypt disks and volumes.
The toolkit allows using the volume’s plain-text password, escrow or recovery keys, as well as the binary keys extracted from the computer’s memory image or hibernation file.
FileVault 2 recovery keys can be extracted from iCloud, while BitLocker recovery keys are available in Active Directory or in the user’s Microsoft Account.
If neither the encryption key nor the recovery key can be extracted, EFDD can extract meta data from the encrypted container.
Features
• Real-Time Access to Encrypted Information
• Extract metadata
• VeraCrypt Encryption
• And much more..
What’s New
* added support for APFS partitions with FileVault2
* added support for VeraCrypt (generating files for further password recovery)
* added support for GUID partitions
* improved support for encrypted HFS+ partitions
* improved UI; disk letters are now available
* improved PGP WDE support
Title Release: Elcomsoft.Forensic.Disk.Decryptor.2.11.751
Developer: Home Page
License: ShareWare
OS: Windows
Download:
Elcomsoft Forensic Disk Decryptor 2.11.751 (38 MB)