I've read that when an encrypted zip file is opened using explorer, windows caches the passwords in the Credential Manager.

Given the memory image of a machine where I've opened an encrypted zip, is there a way using volatility to extract the said password?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.