I remember using EnCase7 to decrypt documents using EFS. I am now faced with my first case where I need to decrypt documents using EFS. The books I have don't cover it, I have scoured the internet and this forum looking for the answer, and even reviewed my notes (where we spent about 15 minutes working on it in a click here, click there, see how easy it is). I have scanned the volume for EFS, I can view some of the decrypted files, but not all of them. I know what II have to enter is somewhere in secure storage, I know I have to enter the passwords. I just can't figure out how to find the user passwords and enter them where they should go. I need my next step. All I have access to is EnCase 7, how am I able to determine user passwords that need to be entered into secure storage....once I do that, how do I decrypt the EFS documents.
If it would be easier to send me a message, I'd appreciate it. If there is a resource I have not found on the internet, please point me in that direction. Thank you
↧