GitHub - binglot/Cryptoscan: It is an updated version of a module created by Jesse Kornblum for the Volatility framework which scans a memory image for TrueCrypt passphrases. The method is described in Brian Kaplan's thesis “RAM is Key, Extracting Disk Encryption Keys From Volatile Memory”, pages 22-23. More on that can be found on the author's blog.

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
memory_plugins		memory_plugins
unxtools		unxtools
Cryptoscan.cmd		Cryptoscan.cmd

About

It is an updated version of a module created by Jesse Kornblum for the Volatility framework which scans a memory image for TrueCrypt passphrases. The method is described in Brian Kaplan's thesis “RAM is Key, Extracting Disk Encryption Keys From Volatile Memory”, pages 22-23. More on that can be found on the author's blog.

PassionateAboutIS.blogspot.com