[Vol-users] Guidance

neofito vjaviergarcia at ono.com
Fri Nov 9 16:46:18 CST 2012


You should try this

http://passionateaboutis.blogspot.com.es/2011/11/cryptoscan-fixed-windows-vista-support.html

Good luck!


El 09/11/2012 17:38, Thilaknath Ashokkumar escribió:
> Hi I am currently using volatility to retrieve truecrypt keys stored 
> in memory, by accessing a ram dump. Can you please help me out on how 
> to map the exact location of keys using volatility as i am able to 
> list the process running while the image was taken, and hence forth i 
> am not able to narrow down my search criteria , please help me out.
>
>
> Thank you
>
>
> Thilaknath



More information about the Vol-users mailing list