Collaborate Disseminate
There are many articles out there stating that a user’s encrypted files are lost after an administrator resets the password of that user.
I tried:
Logged on as user (Domain User) with password 54321
created a file named test.txt on the de… Continue reading EFS-encrypted files not lost when domain admin resets password
A cute name but an annoying and potentially damaging attack. Here’s what to do. Continue reading Windows “PetitPotam” network attack – how to protect against it
Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key stored alongside certificates for that user … Continue reading Does EFS protect against data theft by ransomware?
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used PCUnlocker to forcefully reset my pass… Continue reading Crack Windows 10 password with Cain and Able
I’m trying to copy EFS-encrypted files from an NTFS partition using:
ntfsdecrypt -k mycert.pfx /dev/sda2 -i 32768
and I get:
Key does not have an EFS purpose OID
Failed to extract the private RSA key.
More info:
The password is indeed c… Continue reading ntfsdecrypt – Key does not have an EFS purpose OID
By now the Settings have this option
"Use my sign-in info to automatically finish setup after an update or restart" . Does it mean that prior it and when its y, if non-Administrator user is Logged In while there is an Update, he … Continue reading Windows 10 Update auto-logon EFS compromize?
I have some files on an NTFS USB drive.
The files were encrypted on a Windows 10 pc and copied to the USB.
I had to completely reinstall Windows on the PC. I do not have a backup of the USB files
I know the name of the PC, and the username… Continue reading Recovering NTFS encrypted files from a USB drive on a different machine
With EFS, we know that a symmetric key, File Encryption Key (FEK), is used for encrypting files. The FEK is then protected by encrypting it with the public key of the user that can be recovered by decrypting with their corres… Continue reading Encrypting File System(EFS): Isn’t the use of public key encryption a redundant step which doesn’t improve the security of the FEK? [closed]
What I want to do:
Use the “save password” feature in FireFox (on Windows 10) without using FireFox’s master password feature.
What I’m afraid of:
Someone stealing my laptop or getting access to my hard drive in a different … Continue reading Is encrypting the FireFox folder with EFS protecting saved passwords in case of someone accessing the hard drive?
I’m learning digital forensics and have been given a Windows Vista image with a bunch of files encrypted using EFS. The image has been sufficiently mangled that it’ll never boot, but I have managed to mount the NTFS partition… Continue reading Decrypting EFS files