Re: [Vol-users] Error extracting Truecrypt Master Keys

I am attempting to recover the Truecrypt Master Keys from a Win7SP1x64 memory image and getting the below errors. Using the Volatility 2.5 Windows stand-alone: C:\>vol2.5.exe -f Truecrypt_MountedContainer.bin --profile Win7SP1x64 truecryptmaster -T 7.1a Volatility Foundation Volatility Framework 2.5 Container: Hidden Volume: No Removable: No Read Only: No Disk Length: 0 (bytes) Host Length: 0 (bytes) Encryption Algorithm: - Mode: - Master Key Traceback (most recent call last): File "<string>", line 192, in <module> File "<string>", line 183, in main File "C:\Users\Jake\Documents\GitHub\volatility\build\pyinstaller\out00-PYZ.py z\volatility.commands", line 145, in execute File "C:\Users\Jake\Documents\GitHub\volatility\build\pyinstaller\out00-PYZ.py z\volatility.plugins.tcaudit", line 666, in render_text File "C:\Users\Jake\Documents\GitHub\volatility\build\pyinstaller\out00-PYZ.py z\volatility.utils", line 71, in Hexdump TypeError: object of type 'NoneType' has no len() _______________________________________________ Vol-users mailing list Vol-users(a)volatilityfoundation.org http://lists.volatilityfoundation.org/mailman/listinfo/vol-users