Elcomsoft System Recovery Update Simplifies Digital Field Triage

ElcomSoft Co. Ltd. updates Elcomsoft System Recovery, a bootable tool for unlocking Windows accounts, accessing encrypted volumes and unlocking encrypted virtual machines. The new release adds the ability to extract Wi-Fi passwords and helps identify the owner of the computer being examined by extracting its Windows license key. In addition, file system analysis is made easier with an embedded two-panel file manager.

“The already powerful digital triage tool gained additional features”, says Andy Malyshev, Elcomsoft s.r.o. Director. “The extraction of Wi-Fi passwords, hints and Q&A for Windows account passwords, as well as the inclusion of the convenient two-panel file manager make Elcomsoft System Recovery the perfect tool for in-field investigations.”

Extracts Wi-Fi Passwords

Home users frequently re-use passwords. Same or similar passwords built to a limited number of patterns are often used to protect access to online resources, encrypt disks, documents and VMs. Extracting all of the user’s existing passwords offers valuable insight to the way the particular user composes their passwords, drastically reducing the time required to discover the right password and increasing the chance of unlocking secure encryption.

The latest build adds the ability to extract Wi-Fi passwords. Together with other types of passwords, the Wi-Fi passwords can be added to a highly targeted custom dictionary that can be used to break strong encryption and attack passwords protecting encrypted documents, disks and accounts.

Reveals Windows License Keys

Elcomsoft System Recovery can reveal Windows product keys, enabling investigators to identify the owner of the computer by requesting information about the owner of the license from Microsoft.

Password Hints, Questions and Answers

Another important piece of information extractable in the field are password hints, questions and answers. This information is intended to help users recall their forgotten passwords. In many cases, examiners can use password hints and QA to re-create the user’s original passwords.

Two-Panel File Manager

Elcomsoft System Recoveryintroduces FAR, one of the most convenient two-panel file managers. The now embedded Far Manager is an open-source tool for navigating the file system and managing files and archives. Far Manager works in text mode and provides a simple and intuitive way for performing the most common actions such as viewing files and directories, accessing hidden and system items, copying data and accessing archives.

About Elcomsoft System Recovery

Elcomsoft System Recovery is a digital triage tool for examining computers in the field. The tool helps overcome the challenger of accessing a locked system, delivering a straightforward workflow for investigating computers in the field. Elcomsoft System Recovery helps access information in encrypted disks and encrypted virtual machines, extract passwords and access encrypted file systems.

About ElcomSoft Co. Ltd.

Founded in 1990, ElcomSoft Co.Ltd. is a global industry-acknowledged expert in computer and mobile forensics providing tools, training, and consulting services to law enforcement, forensics, financial and intelligence agencies. ElcomSoft pioneered and patented numerous cryptography techniques, setting and exceeding expectations by consistently breaking the industry’s performance records. ElcomSoft is Microsoft Certrified Partner (Gold competency), and Intel Software Premier Elite Partner.