Skip to content

Latest commit

 

History

History
7 lines (5 loc) · 484 Bytes

Volatility-Framework.md

File metadata and controls

7 lines (5 loc) · 484 Bytes

Volatility Framework

EditBox is a plugin for the Volatility Framework. It extracts the text from Windows Edit controls, that is, textboxes as generated by Windows Common Controls.

A plugin for the Volatility Framework which aims to extract BitLocker Full Volume Encryption Keys (FVEK) from memory. Works on Windows 7 through to Windows 10.