Forensics
recovery/forensics of NTFS encrypted folder. Dec 31 2006 03:35PM
Rikard Johnels (rikard j rikjoh com) (2 replies)
Re: recovery/forensics of NTFS encrypted folder. Jan 02 2007 07:09AM
Chetan Gupta (chetan gupta niiconsulting com) (1 replies)
Re: recovery/forensics of NTFS encrypted folder. Jan 04 2007 06:51PM
farmerdude (subscribe crazytrain com) (1 replies)
Re: recovery/forensics of NTFS encrypted folder. Jan 04 2007 07:53PM
Rikard Johnels (rikard j rikjoh com)
Re: recovery/forensics of NTFS encrypted folder. Jan 02 2007 03:31AM
Bhushan Shah (bhushan niiconsulting com)
Rikard,
Was the disk/encryption authenticated at a server, i.e. was the key
locally authenticated of was it done on a central server which was a
part of the domain?

Bhushan Shah, CCE
International Society of Forensic Computer Examiners
Forensic Analyst
NII Consulting Pvt. Ltd.

Email: bhushan (at) niiconsulting (dot) com [email concealed]
Mobile: +91 9322390797
Web: www.niiconsulting.com

------------------------------------------------------
Online Computer Forensics Magazine
http://www.niiconsulting.com/checkmate

Comprehensive Incident Response and Forensics Services
http://www.niiconsulting.com/services/liveresponse.html
------------------------------------------------------

Rikard Johnels wrote:

>I have a drive where i need to investigate one encrypted folder full of
>equally encrypted files. (XP default type encryption of files/folders)
>The original system disk is unavailable due to a wipe, so the key is lost.
>
>Is there any way to rebuild the files to make an investigation possible?
>
>
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus