In 2021, NVMe SSDs and Intel RST RAID configurations were becoming mainstream. Many older forensic live CDs failed to see these drives. integrated newer Intel RST VMD drivers into the WinPE image. This meant investigators could:
capabilities, is a specialized solution designed for computer forensic professionals to acquire live memory images and bypass full disk encryption (FDE) on systems that are powered on or locked. Core Functionality & Features Passware Bootable Memory Imager
The 2021 edition supported decryption or password recovery for an extensive list of FDE formats: