Hi All,
I am trying to restore encrypted files from raw backup of a volume. i am able to restore other files using MFT. In case of Encrypted file also i am able to get the data clusters and $LOGGED_UTILITY_STREAM from MFT but if i directly try to write this data into file its not in readable format as its encrypted.
Can anybody help on this?