Passware Kit Forensic

Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 350+ file types and works in batch mode recovering passwords.

Full Disk Encryption:

Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS and LUKS2, McAfee, PGP, Steganos, Symantec, TrueCrypt, and VeraCrypt disk images. Supports batch processing.

Optional Passware Kit Forensic T2 Add-on recovers passwords for Macs equipped with Apple T2 Security Chip, including ones protected with EFI firmware password. Available for law enforcement and other types of government organizations. Contact sales for additional information.

Live Memory Analysis:

Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and passwords for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers.

Quick Decryption:
Passware Kit applies all available computational resources for maximum efficiency. It uses multiple CPUs, NVIDIA and AMD GPUs, and multiple computers (for both Passware Kit Forensic and Passware Kit Business). GPU (Graphics Processing Unit) cards accelerate password recovery up to 400 times versus CPU-only systems.