Volatility Framework | Powerful Plugins

image

Volatility Framework

editbox

EditBox is a plugin for the Volatility Framework. It extracts the text from Windows Edit controls, that is, textboxes as generated by Windows Common Controls.

volatility-bitlocker

A plugin for the Volatility Framework which aims to extract BitLocker Full Volume Encryption Keys (FVEK) from memory. Works on Windows 7 through to Windows 10.

Source: Github

Enjoy!

2 Likes