Passware Kit Forensic 2021 (specifically version 2021.2.1) includes a WinPE-based bootable image

Secure Boot Compatibility: It is specifically designed to work with systems where Secure Boot is enabled by using a "Shim UEFI" key management process.

: The 2021 updates improved access to APFS disks on Mac computers equipped with Apple’s T2 security chips, a previously major hurdle for forensic examiners. Forensic Use Cases In field operations, the Passware Kit Forensic

Passware Kit Forensic 2021.21 WinPE Boot L 2021: A Comprehensive Guide

Best practices:

11) Validation and reporting

  1. Verify image integrity via hash comparison.
  2. Document:

    The 2021.2.1 update (often referred to as 2021 v2) introduced several forensic breakthroughs:

  3. Ensure licensing files are placed and offline activation steps are completed per Passware instructions (some licenses use hardware IDs — follow vendor's offline activation workflow).