[Vol-users] Guidance

neofito vjaviergarcia at ono.com
Fri Nov 9 16:46:18 CST 2012

You should try this


Good luck!

El 09/11/2012 17:38, Thilaknath Ashokkumar escribió:
> Hi I am currently using volatility to retrieve truecrypt keys stored 
> in memory, by accessing a ram dump. Can you please help me out on how 
> to map the exact location of keys using volatility as i am able to 
> list the process running while the image was taken, and hence forth i 
> am not able to narrow down my search criteria , please help me out.
> Thank you
> Thilaknath

More information about the Vol-users mailing list