Audience
Organizations searching for a complete encrypted electronic evidence discovery solution
About Passware Kit
Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 340+ file types and works in batch mode recovering passwords. Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and passwords for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers. Resolved navigation issues after stopping the password recovery process. Instant decryption of the latest VeraCrypt versions via memory analysis. Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, and Rainbow Tables. In addition to all the key features of a Windows version, Passware Kit Forensic for Mac provides access to APFS disks from Mac computers with Apple T2 chip.
Other Popular Alternatives & Related Software
XRY
XRY by MSAB is a mobile-device forensics extraction solution that enables investigators to securely and efficiently access, extract, and preserve digital evidence from smartphones, tablets, and other mobile devices. It supports a wide and growing range of devices, unlock and bypass features (including passcode bypass and chip-level support for difficult devices), full decoding of app data (such as WhatsApp, Facebook, Instagram, Viber), browser history (Safari, Chrome, Opera), and location/timeline correlation across sources. It is built with full chain-of-custody and evidential integrity in mind, including a secure XRY forensic file format with encryption and auditing, while offering access both at the frontline (scene) and in the lab. XRY includes variants such as Logical (fast, live data), Physical (raw memory dumps, deleted data recovery), Cloud (cloud-/app-based data), and Pro (deepest device and exploit access).
Learn more
LLIMAGER
LLIMAGER was designed to address the need for a low-cost, no-frills “live” forensic imaging solution for Mac computers, capable of capturing the entirety of a synthesized disk, including volume unallocated space, as macOS sees the disk with its partitions mounted.
The application was developed to be user-friendly and easy enough for entry level digital forensics examiners. The application leverages built-in Mac utilities, providing a versatile solution compatible with a wide range of macOS versions, both past and present. This ensures that the tool remains functional across diverse system configurations and updates.
FEATURES INCLUDE:
Powerful and Fast "Live" imaging, CLI based Application
Supports Intel, Apple Silicon, T2 Chips, and APFS File Systems.
Full Acquisition Log
SHA-256 or MD5 Hashed DMG Images
Choice of Encrypted /Decrypted DMGs for use in commercial forensics tools
Unlimited Technical Support
Learn more
OSForensics
Extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC. Discover relevant data faster through high performance file searching and indexing. Extract passwords, decrypt files and recover deleted files quickly and automatically from Windows, Mac and Linux file systems. Identify evidence and suspicious activity through our hash matching and drive signature analysis features. Identify and analyze all files and even automatically create a timeline of all user activity. 360° Case Management Solution. Manage your entire digital investigation with OSF’s new reporting features. Build custom reports, add narratives and even attach your other tools’ reports to the OSF report. Volatility Workbench is a graphical user interface (GUI) for the Volatility tool. OSForensics courses offered to suit a diverse range of users and skill sets. Write an image concurrently to multiple USB Flash Drives.
Learn more
Active@ Disk Image
Active@ Disk Image is a disk image software that makes an exact copy of any PC disk (HDD, SSD, USB, CD, DVD, Blu-ray etc.) and stores it into a folder. The disk images may be used for backups, PC upgrades or disk duplication purposes. In case of computer failure, a backup image may be used to recover your computer system or find & restore any necessary files from within an image. Create & Restore Disk Image Backup (occupied clusters only). Image Compression (Fast, Normal and High). Mounting images as virtual drives. Incremental and Differential images. RAID is supported. Rescue bootable media. Create & restore raw disk image (sector by sector copy). Scheduled backups. Windows Servers are supported. Image Encrypting (AES-128, AES-192, AES-256). Scripting support. E-mail notifications. Cloud storage.
Learn more
Pricing
Starting Price:
$1,195 one-time payment
Free Trial:
Free Trial available.
Integrations
Company Information
Passware
Founded: 1998
United States
www.passware.com/kit-forensic/
Videos and Screen Captures
Other Useful Business Software
Stay in Flow. Let Zenflow Handle the Heavy Lifting.
Zenflow is your engineering control center, turning specs into shipped features. Parallel agents handle coding, testing, and refactoring with real repo context. Multi-agent workflows remove bottlenecks and automate routine work so developers stay focused and in flow.
Product Details
Platforms Supported
Windows
Mac
Linux
Training
Documentation
Videos
Support
Phone Support
Online
