I have a drive which I need to recover data from and would like to extract if from a bitwise copy I made of the target drive (using linux's dd). From what I have seen of the drive it appears to be using CFS (cryptographic file system) to store backed up files in a NTFS partition. I'm not familiar with CFS other than the basic article I found about it. Essentially it runs in user space and attaches a NFS mount which displays files (temporarily) in clear text and mirrors all changes to the encrypted CFS. Are my assumptions correct? Does anyone know how I can directly access the content in the CFS? I can't simply use the rebit software to restore since that doesn't restore directories or something.
Rebit Support Forum » Troubleshooting
Forensic recovery of data stored using rebit
(2 posts)-
Posted 10 months ago #
-
Forensic data recovery is outside my area of expertise. Your best bet would be to contact support directly and talk to a specialist in software recovery.
Posted 10 months ago #
Reply
You must log in to post.