[Vol-users] Guidance

Giotis gi0tis at ath.forthnet.gr
Sat Nov 10 05:59:26 CST 2012


@neofito

Are cryptoscan and suspicious compatible with 2.3 rev.2775? They somehow
fail to load for me.
Also, were you able to get the keys from systems using the older
versions of Truecrypt?

Btw, thank you for providing info for those plugins!

On 11/10/12 12:46 AM, neofito wrote:
> You should try this
>
> http://passionateaboutis.blogspot.com.es/2011/11/cryptoscan-fixed-windows-vista-support.html
>
>
> Good luck!
>
>
> El 09/11/2012 17:38, Thilaknath Ashokkumar escribió:
>> Hi I am currently using volatility to retrieve truecrypt keys stored
>> in memory, by accessing a ram dump. Can you please help me out on how
>> to map the exact location of keys using volatility as i am able to
>> list the process running while the image was taken, and hence forth i
>> am not able to narrow down my search criteria , please help me out.
>>
>>
>> Thank you
>>
>>
>> Thilaknath
>
> _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
>



More information about the Vol-users mailing list