WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find signature!
GoogleCodeExporter opened this issue · 2 comments
GoogleCodeExporter commented
I already have Volatility and pycrypto installed.
I downloaded Construct and installed that. I hopefully located the correct one.
However when I run Volatility with the mimikatz.pl plugin, I keep getting the
following warning message;
"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find
signature!"
As for the output, I see the Module, User and Domain columns populated, but
nothing under the Password column. I tried running a pair of memory captures
that I made with Belka.
Original issue reported on code.google.com by gle...@gmail.com on 5 May 2014 at 6:29
GoogleCodeExporter commented
Do you happen to have a test memory capture or one that you can suggest to use
to test my installation+mimikatz plugin?
Original comment by gle...@gmail.com on 5 May 2014 at 6:33
GoogleCodeExporter commented
Hi glentc,
so sorry for the lag... usually the following error
"WARNING : volatility.plugins.mimikatz: [LsaDecryptor] unable to find
signature!"
means "something is paged out..."... probably the lsasrv.dll module...
Original comment by francesco.picasso on 25 Nov 2014 at 4:10