Hi everyone,
I recovered files from a broken partition using testdisk, but EFS protected files are all empty after copying.
I still have the private key and could open them if they were extracted, but they all end up being empty. Is there a way to recover such files with testdisk as well?
Thank you,
EFS protected files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5406
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: EFS protected files
There is no code to deal with EFS protected files in TestDisk.
Reading https://github.com/gentilkiwi/mimikatz/ ... -EFS-files it looks awfully complex to deal with such files.
Reading https://github.com/gentilkiwi/mimikatz/ ... -EFS-files it looks awfully complex to deal with such files.