Find TrueCrypt and BitLocker encrypted containers and images

Passware announced that Passware Kit Forensic 12.5 can now recognize hard disk images and containers, such as TrueCrypt, BitLocker, PGP, during a computer scan. For a computer forensic professional this means that no evidence is hidden inside a volume.

During a computer scan, which typically takes less than an hour, Passware Kit Forensic displays all encrypted files and hard disk partition images. Previously, there was no way to identify quickly an encrypted container on a file system where important data could be hidden.

The latest release of Passware Kit Forensic now ensures that no evidence is hidden, as it provides users with a list of all encrypted containers, hard disk partition images, and files that look similar to containers.

The software also lists detailed information about the container including encryption type, MD5, and difficulty on recovering the password.

Other key features include password extraction from Windows 8 hibernation files, and improved hardware acceleration of password recovery processes on AMD ATI graphic cards.

Passware Kit Forensic can be purchased in a bundle with EnCase. The price is $995 with one year of free updates.