Advanced decryption with Detego and Passware
MCMS has partnered with Passware, Inc to fully integrate their industry leading solution into the Detego® Unified Forensics Platform. This allows users to seamlessly identify encrypted evidence, recover and break through passwords from 280+ file types all within our unified platform.
Not only can Detego® automatically identify every encrypted and password protected file or folder on an exhibit, but it can also effortlessly launch a series of attacks to break through and gain access.
Passware Kit Forensic
Passware Kit Forensic discovers all password-protected items on a computer and decrypts them. The software recognizes 280+ file types and works in batch mode to recover their passwords. Many types of files are decrypted instantly, while other passwords are recovered through Dictionary and Brute-force methods using GPU acceleration and distributed computing (for Windows, Linux, and Amazon EC2).
Live memory analysis
Analyses live memory images and hibernation files and extracts encryption keys of hard disks, logins for Windows & Mac accounts and passwords for files and websites, all in a single streamlined process.
Recovers passwords for Apple iPhone/iPad and Android backups as well as Android images and extracts data from images on Windows phones. Integrated with Oxygen Forensic Suite.
Cloud data acquisition
Acquires backups and data from cloud services (Apple iCloud, MS OneDrive, and Dropbox). Extracts passwords from iCloud keychains.
Password recovery for 280+ file types
MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, password managers, and many other applications.
Cross-platform Passware Kit Agents
Supports distributed password recovery with Agents for Windows, Linux, and Amazon EC2. The Linux version runs a portable Passware Kit Agent from a bootable Linux USB drive.
Encryption detection and analysis
Detects all encrypted files and hard disk images and reports the type of encryption and the complexity of the decryption.
Improved performance, including the capacity to process thousands of files simultaneously and to handle larger dictionary files.
Runs password recovery for groups of files without manual intervention.
Includes automatic software updates with one year of Software Maintenance and Support (SMS) subscription.
Decryption of FDE
Decrypts or recovers passwords for BitLocker, FileVault2, TrueCrypt, VeraCrypt, LUKS, McAfee, APFS, Apple DMG, Symantec, and PGP disk images.
Accelerates password recovery with multiple computers, NVIDIA & AMD GPUs, TPR, and Rainbow Tables
Password Exchange provides access to the list of passwords found by Passware Kit users worldwide, offering it as an advanced dictionary to improve chances of finding strong passwords.