Repository navigation

EFS-Key-Extraction-File-Decryption

Public

About

A Digital Forensics project on Windows EFS. Demonstrates identifying encrypted files, extracting File Encryption Keys (FEKs), retrieving private keys from certificates, and decrypting file contents using tools like Sleuth Kit, Mimikatz, OpenSSL, and AES decryption.

digitalforensics

0 stars

0 watching

Report repository

Name		Name	Last commit message	Last commit date
EFSParser.zip		EFSParser.zip
README.md		README.md
UserGuide.docx		UserGuide.docx

Repository files navigation

EFSParser.zip Password: efs12345678

Disable any antivirus before extracting & running

About

A Digital Forensics project on Windows EFS. Demonstrates identifying encrypted files, extracting File Encryption Keys (FEKs), retrieving private keys from certificates, and decrypting file contents using tools like Sleuth Kit, Mimikatz, OpenSSL, and AES decryption.

digitalforensics

0 stars

0 watching

Report repository

Releases

Packages

Contributors