[Vol-users] Guidance

Thilaknath Ashokkumar thilaknath.ashok at gmail.com
Fri Nov 9 10:38:09 CST 2012


Hi I am currently using volatility to retrieve truecrypt keys stored in
memory, by accessing a ram dump. Can you please help me out on how to map
the exact location of keys using volatility as i am able to list the
process running while the image was taken, and hence forth i am not able to
narrow down my search criteria , please help me out.


Thank you


Thilaknath
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.volatilityfoundation.org/pipermail/vol-users/attachments/20121109/0aa2c376/attachment.html


More information about the Vol-users mailing list