Restoring Encrypted files from Raw volume Backup using MFT

Discussion in 'C Programming' started by vrushali662, Jun 29, 2011.

  1. vrushali662

    vrushali662

    Joined:
    Feb 3, 2011
    Messages:
    2
    Hi All,

    I am trying to restore encrypted files from raw backup of a volume. i am able to restore other files using MFT. In case of Encrypted file also i am able to get the data clusters and $LOGGED_UTILITY_STREAM from MFT but if i directly try to write this data into file its not in readable format as its encrypted.
    Can anybody help on this?

    Thanks.
    vrushali662, Jun 29, 2011
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. jepler@unpythonic.net
    Replies:
    7
    Views:
    990
    Claudio Grondi
    Oct 13, 2005
  2. gavino
    Replies:
    13
    Views:
    1,037
    cmdrrickhunter@yaho.com
    Jul 3, 2006
  3. TungstenCoil
    Replies:
    7
    Views:
    400
  4. Stuart Clarke

    MFT parsing - NTFS

    Stuart Clarke, Feb 5, 2011, in forum: Ruby
    Replies:
    0
    Views:
    176
    Stuart Clarke
    Feb 5, 2011
  5. bean101carter@gmail.com
    Replies:
    0
    Views:
    576
    bean101carter@gmail.com
    Apr 9, 2013
Loading...

Share This Page