Forensic examiners often find encrypted or password-protected files during examinations of suspect computers. Password-cracking utilities allow you to view the contents of files.
Passware
Passware specializes in recovering passwords and decrypting media. The latest Passware forensic kit includes utilities to recover passwords and collect forensic evidence from over 180 types of files including decrypt media, files, and folders. Passware software ships as a complete forensic kit or various collections of utilities to meet the many needs of a forensic investigation. All Passware software is operated from an easy to use integrated user interface that makes it easy to collect evidence. For more information on Passware, visit their Web site: http://www.lostpassword.com.
ElcomSoft
ElcomSoft password-recovery software helps forensic investigators open files protected by popular computer applications. Elcomsoft is able to recover passwords from more than 80 different types of files, including the most popular archive and office applications. The product also helps recover files encrypted with the Microsoft Encrypting File System (EFS). For more information on ElcomSoft products, visit their Web site: http://www.elcomsoft.com.
Ophcrack
Ophcrack is a freely available password recovery utility for Microsoft Windows, Linux, and OS X. Ophcrack uses pre-built hash tables of common passwords, called rainbow tables, to quickly compare hash values to crack passwords. This tool is a handy addition to any forensic toolbox to help recover passwords. For more information on Ophcrack, visit their Web site: http://ophcrack.sourceforge.net/.