Passware

💻 The Device Decryption Add-on has been enhanced with a new decryption option for BitLocker-encrypted Lenovo ThinkPads with TPM 2.0. This tool acquires and displays the Volume Master Key, allowing users to decrypt the volume and retrieve the Recovery key. 🍏 Passware Kit 2024 v4 is fully compatible with the latest macOS Sequoia, offering T2 unlock, APFS decryption, Keychain password recovery, and other features. It also recovers passwords for Hancom Office files, including Hanword, Hancell, and Hanshow. 📊 The Passware website now features a new Hardware Benchmark page that compares GPU and CPU performance, helping users choose the most cost-effective hardware for password recovery. We extend our thanks to our customers for using the Hardware Benchmark option in Passware Kit and sharing their performance data, which enabled us to compile these valuable statistics! https://lnkd.in/da8sh2-U #DFIR #BitLocker #TPM #Decryption #Passware

👫 The Second Space feature on certain Android devices is of particular interest in computer forensics, as it allows users to create a private, hidden profile where they can run mobile apps under separate accounts. Passware Kit Mobile 2024v3 enables investigators to uncover all Second Space accounts and access the corresponding application credentials and other data. 🔍 The new "Search for device" option streamlines the acquisition process. Simply start typing the device model to initiate an incremental search within the list of supported devices. This allows you to start the decryption based on the selected model. If the device model is not yet supported, PKM offers the option to submit a feature request. ✉️ 📱Additionally, PKM 2024v3 introduces GPU-accelerated passcode recovery for MediaTek Dimensity devices and is compatible with the latest Android 14 version. #DFIR https://lnkd.in/dkvs_WEb

⚡️We are excited to announce the release of the special edition of Passware Kit Ultimate for air-gapped workspaces! 🕵️♂️ This edition empowers investigators to access data from locked mobile devices, computers, encrypted disks, and files – all with a single license, and without Internet access. Passware Kit Ultimate now verifies license and extraction credits offline using QR codes. Passware Kit Ultimate – Air-Gapped Edition is exclusively available as a bundle for law enforcement agencies, government organizations, and private companies with authorized business requirements, such as forensic firms and corporate investigation teams. #DFIR https://passwa.re/n-pku-ag

📖 Discover how the all-new distributed password recovery option of Passware Kit works in our latest article! You'll find valuable information and practical use case to enhance the success rate of your decryption tasks #DFIR https://passwa.re/ar-dpr

💻 Western Digital SanDisk is a well-known and trusted brand in the storage industry. Its USB drives are widely used, thanks to the free, pre-installed PrivateAccess tool that provides secure file encryption and password protection within a private vault. In its recent update, WD removed the "forgot password" option, enhancing security for stolen flash drives but also forcing users to find alternative ways to decrypt their data. This update poses a significant challenge for computer forensics when analyzing flash drives. ⚡️ Passware Kit 2024 v3 tackles this challenge by introducing a SanDisk decryption option that facilitates the workflow with encrypted USB drives for forensic professionals. It recovers passwords for PrivateAccess, SecureAccess, and ENC vaults at high speeds. 📁 Additionally, BitLocker decryption has been enhanced to support BitLocker hash files used by third-party tools such as hashcat and John the Ripper, and it allows instant decryption of volumes with a known Full Volume Encryption Key (FVEK). 💡 The latest version also includes several usability improvements to make the password recovery process smoother and more efficient. #DFIR https://lnkd.in/d3FpH6vD

Passware Kit Mobile 2024v2 unlocks Unisoc-based devices: Samsung, HTC, ZTE, and others 🥉 Unisoc, the third-leading player in the mobile processor market following MediaTek and Qualcomm, is gaining traction as a cost-effective solution for low-end Android devices, attracting manufacturers such as Samsung, HTC, and ZTE. 💥 Passware introduces GPU-accelerated passcode recovery and data extraction for Unisoc-based smartphones, adding support for over 170 models from various manufacturers. This brings the total number of supported devices to over 800. 📲 Additionally, support for Qualcomm and MediaTek devices has been enhanced with new compatibility for popular MT6781 and Snapdragon 865 (SM8250) chipsets. 🍏 For Apple devices, PKM 2024 v2 now supports iOS 15.7.8 on A8, A8X, A9, and A9X processors, covering devices like the iPhone 6S and iPad Pro 12.9″. #DFIR passwa.re/n-pkm2024v2

Present-day evidence discovery cases demand sophisticated decryption efforts, which are literally impossible without the right hardware. 🔧 Passware Kit introduces a built-in resource management tool that allows computer forensic professionals to easily configure, manage, and monitor a cluster of Passware Kit Agents. Coupled with the redesigned Distributed Password Recovery option from the previous update, the all-new Resource Manager ensures optimal hardware utilization and efficiency across concurrent password recovery operations. ⚡️ 📁 Passware Kit 2024 v2 adds support for the new file types: yescrypt hashes, the standard password hashing method on recent Linux distributions, and databases from the latest version of FileMaker. Moreover, the device decryption functionality has been expanded, offering the capability to recover passwords for and decrypt a wider range of Western Digital My Passport drives. 💻 #DFIR https://lnkd.in/dZrjNjjJ

While Apple's commitment to user privacy and security remains their priority, the field of computer forensics faces a challenge when it comes to extracting evidence from encrypted Apple devices. 💡Our new article provides comprehensive insights into Apple's native encryption, covering both software and hardware-based levels. The article also contains a how-to video 🎥 , various use-cases on decrypting Macs depending on the presence of a T2 security chip and summarizes Passware Kit capabilities on handling Apple encryption 🔒 #DFIR https://bit.ly/pw-ar-apfs

💻 💻 💻 Efficiently distributing password recovery tasks across high-performance hardware clusters stands out as a crucial feature that helps computer forensics decrypt electronic evidence in the shortest possible time. In its latest release of the year 🎄, Passware prioritizes the enhancement of this feature and introduces the redesigned Distributed Password Recovery option in its Kit Forensic 2024 v1. 🎛️ Passware Kit 2024 v1 features a centralized remote control over Passware Kit Agents in the network. It improves the management of the Agent assignment, connection settings, update options, hardware usage, GPU utilization level, and other configurations. ⌛️ Multiple password recovery attacks are now run simultaneously, reducing the hardware idle time. ⚡️Passware also adds GPU acceleration for EFI password recovery, for Macs both with and without a T2 chip, which is now available in its Device Decryption Add-on and Passware Kit Ultimate. 🔓 Passware extends support for Intuit QuickBooks by introducing compatibility with the newly released version 2024. #DFIR https://bit.ly/pkf-2024v1

💻 Passware introduces Device Decryption Add-on — a specialized solution designed for decrypting Western Digital My Passport disks and Macs equipped with Apple T2 Security Chips. This tool is compatible with My Passport Series 2018-2022 disks with built-in 256-bit AES hardware encryption, providing the capability to unlock or decrypt them, and recover original protection passwords. The Device Decryption Add-on is integrated into Passware Kit Ultimate 2023 v4 and is available as an option for Passware Kit Forensic. 🌐 The new version of Passware Kit also features instant recovery of Wi-Fi passwords and extraction of network credentials from the standalone Windows “Users” and “Config” folders. 🦊 Passware Kit 2023 v4 now detects and analyzes Mozilla key4.db database files, which allow for the recovery of the Mozilla Master password. As a result of the GPU-accelerated recovery, Passware Kit immediately extracts website and email passwords saved in the latest versions of Firefox and Thunderbird. ⚡️ Password recovery for NTLMv2 hashes can now be accelerated on NVIDIA and AMD GPU. And finally, Passware Kit 2023 v4 adds full support for the newly released macOS Sonoma 🍏 #DFIR https://bit.ly/pkf2023v4