Re: [Vol-users] Guidance

IIRC prior to version 4.3a there was a recognized flaw in Truecrypt regarding the use of encryption keys.  Following that it becomes much harder to recover the keys. Jon.  ________________________________ From: Thilaknath Ashokkumar <thilaknath.ashok(a)gmail.com> To: vol-users(a)volatilityfoundation.org Sent: Friday, November 9, 2012 4:38 PM Subject: [Vol-users] Guidance Hi I am currently using volatility to retrieve truecrypt keys stored in memory, by accessing a ram dump. Can you please help me out on how to map the exact location of keys using volatility as i am able to list the process running while the image was taken, and hence forth i am not able to narrow down my search criteria , please help me out. Thank you Thilaknath _______________________________________________ Vol-users mailing list Vol-users(a)volatilityfoundation.org http://lists.volatilityfoundation.org/mailman/listinfo/vol-users