Belkasoft Evidence Center X v2.6

[etness]

Can this software acquire dumps from MediaTek devices like mtkclient does, decrypt FBE or FDE by cracking pin/password with passware?
Could this be a valid alternative to OxygenDetective?

 

[etness]

I analyzed your issue, inside App/Belkasoft.B.dll the costructor of class wkk call the native function InitializeAppLayer, the dll FSDriver.dll is protected (unknow protection for now), maybe an hook on virtualprotect should deobuscate it.
I think inside that dll there is a check on signature. If you change license.xml signature is not more valid.
You can't activate a license if the signature is invalid.

 

[dag.oriordan]

Please, Log in to view quote content!

Yes, it's a very good software. A good alternative to both UFED and Oxygen. I've used it several times in courses and it seems valid.

 

[dag.oriordan]

Please, Log in to view quote content!

It would be really nice to be able to break it...unfortunately I had to give up. Too many difficult for me

 

[xx7777j]

관심 있어요

 

[demidexter]

Please, Log in to view quote content!

I doubt anyone will bother updating this software. It’s not nearly as popular as OFD, MSAB XRY, or ufed

 

[demidexter]

Please, Log in to view quote content!

And to put it mildly, Belkasoft’s forensic software falls well short of the tools I mentioned above, both in mobile and computer forensics. But thats just my opinion

 

[Blackhaert]

I agree with you. However, there are a lot of false positives. I’d really like to try iOS Extractor.