Key benefits of the portable edition:
: Choose Elcomsoft when your investigation requires a balanced toolset that handles password recovery, data extraction from mobile devices and cloud services, and disk forensics within a reasonable budget. Choose Passware when your primary challenge is breaking extremely complex passwords and you have the budget for premium password-cracking capabilities.
To understand EFDD's place in the market, it is important to compare it to other leading solutions.
Suspect PC powered on (or recently slept/hibernated) │ ▼ [Analyst inserts forensic USB with EFDD Portable] │ ▼ Run EFDD portable → Select acquisition source (RAM/hibernation file) │ ▼ EFDD extracts encryption keys (few seconds to minutes) │ ▼ Decrypt target partition → Mount as read-only drive │ ▼ Image with forensic imager → Proceed to analysis