The update (often associated with build "2021.1.1") introduced several critical features for digital investigators, most notably the Passware Bootable Memory Imager . This tool is a WinPE-based environment designed to bypass system protections and capture volatile data. Key Features of the 2021 v1 Release
: By performing a "warm boot," investigators can capture encryption keys (like BitLocker VMKs) that reside in RAM while the system is powered on.