SecurityFocus

recovery/forensics of NTFS encrypted folder. Dec 31 2006 03:35PM
Rikard Johnels (rikard j rikjoh com) (2 replies)

I have a drive where i need to investigate one encrypted folder full of
equally encrypted files. (XP default type encryption of files/folders)
The original system disk is unavailable due to a wipe, so the key is lost.

Is there any way to rebuild the files to make an investigation possible?

--
/Rikard

------------------------------------------------------------------------
-----
email : rikard.j (at) rikjoh (dot) com [email concealed]
web : http://www.rikjoh.com
mob: : +46 (0)763 19 76 25
------------------------ Public PGP fingerprint ----------------------------
< 15 28 DF 78 67 98 B2 16 1F D3 FD C5 59 D4 B6 78 46 1C EE 56 >
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBFl9jCWdS2eEYc7lYRArinAJ99dpVjIT7jHCjr13Sis4T2RfaXcgCg8Gsb
ENIB2HhdZAWYTaGBhnBjc8U=
=8LrQ
-----END PGP SIGNATURE-----

[ reply ]

Re: recovery/forensics of NTFS encrypted folder. Jan 02 2007 07:09AM
Chetan Gupta (chetan gupta niiconsulting com) (1 replies)

Re: recovery/forensics of NTFS encrypted folder. Jan 04 2007 06:51PM
farmerdude (subscribe crazytrain com) (1 replies)

Re: recovery/forensics of NTFS encrypted folder. Jan 04 2007 07:53PM
Rikard Johnels (rikard j rikjoh com)

Re: recovery/forensics of NTFS encrypted folder. Jan 02 2007 03:31AM
Bhushan Shah (bhushan niiconsulting com)