Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Passware Kit Forensic offers a comprehensive solution for discovering encrypted electronic evidence, effectively reporting and decrypting all password-protected files found on a computer. The software supports over 340 file types and can operate in batch mode to recover passwords efficiently. It is capable of analyzing live memory images and hibernation files, enabling the extraction of encryption keys for hard disks as well as passwords for both Windows and Mac accounts. Additionally, the Passware Bootable Memory Imager is designed to capture the memory of computers running Windows, Linux, and Mac operating systems. After addressing navigation issues that arose when halting the password recovery process, the software now provides instant decryption for the most recent versions of VeraCrypt through memory analysis. Password recovery is significantly sped up by utilizing multiple computers, NVIDIA and AMD GPUs, along with Rainbow Tables. Furthermore, Passware Kit Forensic for Mac includes all of the robust features available in the Windows version, while also offering access to APFS disks specifically from Mac computers equipped with the Apple T2 chip. This ensures that users have a versatile and powerful tool for their encrypted evidence recovery needs.
Description
Sherlock Forensics Recover is a powerful Windows desktop application that allows users to explore drives and disk images, generate forensic images, and restore deleted files. Compatible with Windows 10 and 11, it supports a variety of file systems including FAT32, NTFS, exFAT, APFS, HFS+, ext, XFS, Btrfs, and ZFS. Users can conduct both quick and comprehensive scans, featuring signature-based carving, lost-partition recovery, and RAID reconstruction capabilities. The software identifies results using file metadata, signature location, or assumptions, and it flags files that are likely to have been overwritten. Additionally, it generates self-contained offline HTML reports, records SHA-256 hashes, and ensures that the source drive remains unaltered during operations. A free version is offered, while the Pro version, available for a one-time fee of $295, includes enhanced recovery features and the ability to analyze pagefiles for URLs, paths, IP addresses, and credentials. This tool is specifically designed for use by forensic examiners, IT professionals, and specialists in data recovery. Furthermore, the installation package is EV-signed and verified with SHA-256, ensuring a secure setup process. Its robust capabilities make it a reliable choice for anyone needing in-depth forensic analysis.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
Claris FileMaker
Yes
Lotus Notes to Office 365
Yes
Microsoft 365
Yes
QuickBooks Online
Yes
iTunes
Yes
Integrations
Claris FileMaker
No
Lotus Notes to Office 365
No
Microsoft 365
No
QuickBooks Online
No
iTunes
No
Pricing Details
$1,195 one-time payment
Free Trial
Yes
Free Version
No
Pricing Details
$0
Free edition: browse, preview, export files, and create raw or E01 disk images. Pro is a $295 one-time purchase with no subscription; it adds deleted-file recovery, unallocated-space carving, RAID reconstruction, lost-partition search, and recovery of previous Windows versions.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Passware
Founded
1998
Country
United States
Website
www.passware.com/kit-forensic/
Vendor Details
Company Name
Sherlock Forensics
Founded
2006
Country
Canada
Website
www.sherlockforensics.com/data-recovery-software
Product Features
Law Enforcement
Case Management
No
Certification Management
No
Court Management
No
Court Management Integration
No
Crime Scene Management
No
Criminal Database
No
Dispatching
No
Evidence Management
No
Field Reporting
No
Incident Mapping
No
Internal Affairs Administration
No
Investigation Management
No
Scheduling
No
Product Features
Data Recovery
Web Access / Restoration
No
Backup Log
No
Backup Scheduling
No
Compression
No
Continuous Backup
No
Encryption
No
Incremental Backup
No
Local Server Options
No
Multiple System Support
No
Remote Server Options
No
Secure Data Storage
No