Re: [Vol-users] Guidance
10 Nov
2012
10 Nov
'12
6:59 a.m.
@neofito
Are cryptoscan and suspicious compatible with 2.3 rev.2775? They somehow
fail to load for me.
Also, were you able to get the keys from systems using the older
versions of Truecrypt?
Btw, thank you for providing info for those plugins!
On 11/10/12 12:46 AM, neofito wrote:
You should try this
http://passionateaboutis.blogspot.com.es/2011/11/cryptoscan-fixed-windows-v…
Good luck!
El 09/11/2012 17:38, Thilaknath Ashokkumar escribió:
Hi I am currently using volatility to retrieve
truecrypt keys stored
in memory, by accessing a ram dump. Can you please help me out on how
to map the exact location of keys using volatility as i am able to
list the process running while the image was taken, and hence forth i
am not able to narrow down my search criteria , please help me out.
Thank you
Thilaknath
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users