is a specialized forensic tool developed by ElcomSoft Co. Ltd. designed to decrypt data stored in encrypted containers and to extract encryption keys from the computer’s volatile memory (RAM) or hibernation files.
Elcomsoft frequently publishes technical articles that serve as "papers" explaining how their portable decryption tools work, especially regarding RAM imaging Live Analysis Decryption of BitLocker, PGP, and TrueCrypt: This technical overview elcomsoft forensic disk decryptor portable
—the digital "master keys" that the operating system uses to access encrypted data while it's in use. Extraction : The tool pulled the keys from the without altering the suspect's files. Decryption is a specialized forensic tool developed by ElcomSoft Co