Password Audits
& Recovery Services

Cracked 99.8% of 260,000 password hashes. Passwords complied with documented policies, but policies didn't prevent major trends and predictable user behavior. Identified administrators abusing privileges to reuse passwords, evading password history controls.

A firm was processing thousands of password-protected Microsoft Office and PDF documents for eDiscovery. After commercial password cracking software proved ineffective, they engaged KoreLogic's PRS. We accomplished more in days than they had managed in months.

Leveraged PRS to understand user compliance and satisfy audit requirements. 84% of the organization's 11,000 user passwords were found in 24 hours, leading to policy change discussions that ended with a complete revamp of their security policies.

A couple ran a small business together; the husband did all bookkeeping and kept business/personal financial account information in an encrypted spreadsheet. When he passed away suddenly, his wife couldn't access any information. We decrypted the spreadsheet, saving her hours of effort and immeasurable frustration.

Recovery of encrypted files from a CD used by a former employee of an acquired company. KoreLogic reverse-engineered the proprietary encryption to gain access to the files when standard approaches failed.

A private citizen being audited by the IRS urgently needed access to password-protected PDF files containing audit-relevant information. After unsuccessful attempts to recall/guess/recover passwords, PRS recovered the passwords in a fraction of a compute hour (mere minutes).