Programs as Encase with the EDS module and Secret Explorer from Lastbit can read from protected storage on a not-live machine i.e. imported protected storage from another machine (ntuser.dat) to the program. Can anyone explain how this is possible and how they do it?

tnx in advance