This video is a comprehensive summary of how to use Elcomsoft's disk decryptor to decrypt Truecrypt, Filevault 2, PGP encryption, VeraCrypt containers, and even BitLocker. This tool allows you to extract cryptographic keys from RAM captures by dumping memory. it allows forensics investigator to decrypt keys from memory dumps and create memory dumps and find keys from hibernation and page files or uses plain-text password or escrow keys to decrypt files, folders and disk drivers and decrypt partitions.
ElcomSoft's Disk Decryptor - www.elcomsoft.com/efdd.html
Instantly access data stored in encrypted BitLocker, FileVault 2, PGP, TrueCrypt and VeraCrypt containers. The tool extracts cryptographic keys from RAM captures, hibernation and page files or uses plain-text password or escrow keys to decrypt files and folders stored in crypto containers or mount encrypted volumes as new drive letters for instant, real-time access.
11 дек 2019