PLugin_V0latility Read browser memory and recovers any resident info like username and password. Usage : vol.py --plugins=plugindir --profile=Win7SP1x64 -f win7mem.img plugin-name Works well only if the plugin is active while memory is being dumped