This shows you the differences between two versions of the page.
john:articles:EFS_Recovery [2013/08/06 17:21] richrumble created |
john:articles:EFS_Recovery [2018/06/12 08:23] (current) Cruzinie |
||
---|---|---|---|
Line 7: | Line 7: | ||
http://support.microsoft.com/kb/963046 | http://support.microsoft.com/kb/963046 | ||
http://technet.microsoft.com/en-us/library/cc962103.aspx | http://technet.microsoft.com/en-us/library/cc962103.aspx | ||
+ | https://www.tunesbro.com/data-recovery.html | ||
Again that is for File level encryption, folder level is the most common EFS scenario I've encountered however. Pagefiles may also contain plain-text versions of EFS files, it's worth a look if you have a image of a drive. | Again that is for File level encryption, folder level is the most common EFS scenario I've encountered however. Pagefiles may also contain plain-text versions of EFS files, it's worth a look if you have a image of a drive. |