What TRIM, DRAT, and DZAT Really Mean for SSD Forensics
June 2nd, 2025 by Oleg Afonin
If you’re doing forensic work today, odds are you’re imaging SSDs, not just spinning hard drives. And SSDs don’t behave like HDDs – especially when it comes to deleted files. One key reason: the TRIM command. TRIM makes SSDs behave different to magnetic hard drives when it comes to recovering deleted evidence. This article breaks down what TRIM actually does, how SSDs respond, and what forensic experts need to know when handling modern storage.
Need to protect your VBA macro ? Simply damage the file !
October 8th, 2009 by Andrey Malyshev
One of our customers sent me two Excel XLA add-ins. When I tried to open that file in the VBA Editor — the "Project is locked" message appeared. Add-in has been already unlocked by our VBA password recovery tool. According to Microsoft article this message may appear in two cases: when the macro is protected by password or when it is digitally signed. I analysed the macro password record and found that the password is empty. MS Excel also showed me that macro have no any digital signatures. Then I looked into protection record with more attention and for example found that:
Load yourself to the full with books and music for free
September 21st, 2009 by Olga Koksharova
Back from summer holidays? Suntanned, full of energy, had a good time? And worried about your bank account balance? Don’t strain your nerves unnecessarily, rather keep your business flourishing. We say that your money will return like a homing pigeon back to you! Keep your windows wide open
More on Radeon HD 5000
September 10th, 2009 by Vladimir Katalov
Tom’s Hardware is a really good source we can definitely trust, so if you need more details on Radeon HD 5000-series cards (specifications and prices) that are coming soon, just read:
AMD vs NVIDIA, next round
September 9th, 2009 by Vladimir Katalov
Looking for new password cracking hardware (to take advantage of GPU acceleration)? Wait just a little bit more: new ATI and NVIDIA cards (with DirectX 11) will be available soon.
Fastest GPU(s)
August 11th, 2009 by Vladimir Katalov
Just about two weeks ago, ATI has introduced the fastest GPU yet: FirePro V8750. 800 shader engines, 115.2 GB/s memory bandwidth, 2 GB frame buffer memory (GDDR5), two DisplayPort outputs, one DVI output. Thinking about purchasing it? The cost is as high as $1,800. More details at Tom’s Hardware.
Advanced Office Password Recovery: customizing the preliminary attack
August 4th, 2009 by Andrey Malyshev
Every time when you open a document in Advanced Office Password Recovery it performs the preliminary attack in case when the "file open" password is set. This attack tries all passwords that you recovered in past (which are stored in password cache), dictionary attack and finally the brute-force attack is running.
Office 2010: two times more secure
July 28th, 2009 by Andrey Malyshev
We are waiting for release of new Microsoft office suite – Office 2010. Right now Microsoft has only technical preview of new Office; this preview has been leaked from Microsoft and everyone can download it with the help of torrent trackers. We’ve got a copy of Office 2010 and analysed its (new) password protection.
ElcomSoft News
July 22nd, 2009 by Katerina Korolkova, Direktur Humas
As the second summer month is coming to an end, it’s time to sum up our news and updates that you might have missed because of vacation in some tropical heaven. Last two weeks brought us really hot days, not only because of the temperature in Moscow City but also due to hard work on program updates. Here is the news:
