Passware Exposes Private Data Indexed by Windows Search

25th May 202013th November 2008 by Forensic Focus

Search Index Examiner lists all the documents, emails, and spreadsheets, as well as providing creation and modification dates, author, recipients, summary content, and other information for each item. The only data it needs from the target computer is a Windows Search database. A quick scan of a Windows Search Database can find documents relevant to a case, and even preview of files and items which have been deleted, deliberately or not…It takes under 10 minutes to perform a full scan – extracting over 150,000 items. As an average personal computer stores far fewer items, a typical extraction is almost instant. The wizard interface makes the process easy as ABC.

“The Windows platform is not as secure as it might seem,” states Passware President Dmitry Sumin. “A single file from a computer is enough to expose all the documents and emails for all users on that particular PC. And it takes just a few minutes to get the job done. This is long-awaited news for computer forensics and IT professionals, but may raise privacy concerns.”

With the release of Search Index Examiner, Passware has provided computer forensics with a tool that successfully recovers data that, heretofore, has been hidden from forensics investigators. In time-critical cases, the performance of this evidence discovery tool is invaluable.

System Requirements and Availability

Passware Index Examiner supports Microsoft Windows XP, Vista, and Server 2003, both 32 and 64 bit. The software can be downloaded immediately at www.lostpassword.com. The suggested retail price is $295.00 for a single-user license. Free trial licenses are also available. For additional information, visit: lostpassword.com/search-index-examiner.htm.

About Passware

Founded in 1998, Passware, Inc. provides help desk personnel, law enforcement, forensics agencies, IT professionals, and business and home users around the world with security tools to ensure data availability in the event of lost passwords. Passware’s top selling products – Passware Kit Enterprise and Encryption Analyzer Professional – are widely used by law enforcement agencies and are included in Certified Computer Examiner training. As a global company, Passware, Inc. has offices in the United States and Europe. Current clients include: Microsoft, Adobe, Apple, Intel, Hewlett-Packard, Deloitte & Touche, Ernst and Young, KMPG, PW Coopers, Department of Justice, U.S. Senate, NASA, FBI, IRS and many more, including Fortune 50 companies. www.lostpassword.com.

All trademarks are property of their respective owners.

NEWS SOURCE: Passware, Inc.

Latest Videos

Forensic Focus

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 11:00 am

As a hybrid working environment continues to be a way of life for many professionals, the way employees communicate has been altered as well. The scope and volume of data that needs to be collected and reviewed from computers, mobile devices and cloud applications is evolving.

As the devices and collaboration platforms employees use changes, the approach to collecting data generated on emerging devices and platforms grows increasingly complex as a result. In a 2022 Endpoint Intelligence benchmark survey, only 65% of legal professionals are confident in their ability to collect relevant data from endpoints.

Understanding this ever-changing collection landscape is essential for legal and litigation technology professionals as modern data increases in volume in discovery.

Join Monica Harris, Product Manager at Cellebrite Enterprise Solutions for an educational discussion on the what, when, why and how of modern data collections for legal teams.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_jVTDS1UTTtA

We’re Not in Document Land Anymore: Modern Data Collections for Litigation Technology Professionals

Forensic Focus 6th March 2023 10:00 am

In this episode of the Forensic Focus podcast, Si and Desi explore the cutting-edge technology of deepfake videos and image manipulation. In addition to discussing the latest technological developments and efforts being made to detect manipulated media, they also examine the associated legal and ethical implications.

Show notes:

Boris Johnson image - https://www.theguardian.com/politics/2023/jan/10/spot-the-difference-boris-johnson-appears-scrubbed-from-photo-posted-by-grant-shapps

Deep Fake Neighbour Wars - https://m.imdb.com/title/tt21371376/

Stalin image - https://www.history.com/news/josef-stalin-great-purge-photo-retouching

Nvidia eye contact AI - https://www.polygon.com/23571376/nvidia-broadcast-eye-contact-ai and https://www.youtube.com/watch?v=xl87WTDrReo

Birthday problem - https://en.wikipedia.org/wiki/Birthday_problem

Same frightening woman in AI images - https://petapixel.com/2022/09/09/the-same-frightening-woman-keeps-appearing-in-ai-generated-images/

Inherent mysogeny of AI portraits - https://www.theguardian.com/us-news/2022/dec/09/lensa-ai-portraits-misogyny

Midjourney - https://www.midjourney.org/

Deepfake porn legality - https://www.theverge.com/2022/11/25/23477548/uk-deepfake-porn-illegal-offence-online-safety-bill-proposal and https://www.technologyreview.com/2021/02/12/1018222/deepfake-revenge-porn-coming-ban/

AIATSIS - https://aiatsis.gov.au/cultural-sensitivity

Fake tiger porn story - https://www.dailydot.com/unclick/tiger-porn-britain-law/

Group photo with no blinking - https://www.countrylife.co.uk/comment-opinion/curious-questions-group-photo-179102

Emma Watson deefake audio - https://www.thetimes.co.uk/article/ai-4chan-emma-watson-mein-kampf-elevenlabs-9wghsmt9c

Domestika - https://www.domestika.org/en/courses/981-introduction-to-interviewing-the-art-of-conversation

Investigative Interviewing - https://www.amazon.co.uk/dp/0199681899?ref=ppx_pop_mob_ap_share

Forensic Focus events calendar - https://www.forensicfocus.com/events/

Si Twitter - https://twitter.com/si_biles

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_i41eg24YGZg

Deepfake Videos And Altered Images - A Challenge For Digital Forensics?

Forensic Focus 13th February 2023 10:30 am

Load More... Subscribe

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.