"Working on live systems" - 0:05 "Working in a lab" - 4:19 Evidence - 4:34 Create a portable version of the program - 1:05 BitLocker: - Extract encryption key from Memory dump - 3:25 - Decrypt encrypted disk using the key - 5:03 - Extract the keys from Active Directory file and decrypt the disk - 6:28 TrueCrypt: - Extract the keys from Hibernation file and decrypt the crypto container- 8:07 PGP: - Decrypt the PGP disk image using the recovery key - 10:34
Hi, im not following this, how do you create a mem file or extract keys if the encrypted hard drive is an external drive (it was created on another windows) ?
Hello, I can't open the tc file encrypted by TrueCrypt with Elcomsoft Password Recovery, it shows that it is not supported. I can open and decrypt with Passcovery Suite, but it does not support distributed, Qing can help me answer it, thank you
@Elcomsoft i have a bitlocker encrypted 1 tb hard drive but i have lost both password and recovery key , how can i decrypt without password and what are the procedure i want to do plz answer me ?
I’m testing the trial to see if it gives me a hint of the BitLocker key (which I currently know) but shows me a key in hexadecimal, and my key (passed to hexadecimal) does not match with the 4 digits shown...
sorry but whats the point of using this program if you have the recovery key? you don't elcomsoft paid program, you just use plain old windows and type in the key?! there is no brute force decryption option at all
Вопрос: сможет ли Ваша программа найти рековери ключ к зашифрованному экстернал диску, если энкриптация была завершена 3 июня, а мемори дамп файл был создан 14 июня (соглано файл проперти)? спасибо!
5:00 - 1 - u can use software to create the image of the encrypted disk - why cant u use the physical disk ? 2 - System memory dump taken from the suspect computer - I do not have my old windows or old system anymore , now what ? 3 - Active Directory? I dont have the old system 4 - Hibernation File - there is no such file - my old computer is gone, and my main drive is encrypted? how do u get the hybernation file? 5 - Im actually confused now between 1 and 5 , i have the encrypted hard drive and I can create an image of it - this is all i have. 6 - Recovery key which was extracted? - how o u extract this if u dio not have access to the old computer. None of these steps are clearly explained. Most people have the encrypted drive , how do u get any other item here with no access to the old system i dont understand this , it makes no logical sense
Hello, I can't open the tc file encrypted by TrueCrypt with Elcomsoft Password Recovery, it shows that it is not supported. I can open and decrypt with Passcovery Suite, but it does not support distributed, Qing can help me answer it, thank you
@@ElcomSoftCompany what software will you recommend to create an image of the encrypted drive? Also , why cant i use the hard drive directly ? Do i need to create an image?
how to get the hiberfil.sys to D drive, please help me.. the hiberfil.sys found C drive but i can't access the file, please tell me how to copy to another folder that file..
Extract/prepare data for further password recovery-tried this method .Its showing drive is not encrypted using password.The SD card was using on the lumia 650-Windows 10 phone.Currently I dont have the phone.Help me
I am Japanese. Is it possible to decrypt TrueCrypt and AES-Twofish-Serpent encrypted ones? Also, if the password has 50 digits, is it possible to decrypt it?
Thank you for your comment. You can try to recover the password using ElcomSoft Distributed Password Recovery. Firstly, you need to get the .esprbltg file via EFDD (go to Extract/prepare data for further password recovery). This file contains the data required for password recovery in EDPR. The next step is to add this file in EDPR, then choose the type of attack on the password and start the recovery process.
@@briannyali7662 This is very slow like a dinosaur, it also does not FULLY Utilize the GPUs , no idea why. I tried to break a winzip password of 8 characters and it takes forever - it never finished, i was not going to wait for it.
my problem is that i know my bitlocker password but unfortunately i have changed window 10 to 8.1. now my encrypted drive is not open by saying wrong password. what i do help me??
в принципе всё взламывается, любой массовый софт очень дырявый что винда что мак. поэтому храните важные данные на носителях которые можно быстро физически уничтожить в том числе удалённо в том числе при обесточивании - решений на рынке полно. ну а зеркала в облаках далёких и недоступных для любителей палок :3
