Here's what I have:
- Backed up encrypted files
- Backed up registry files (ntuser.dat)
The original OS (Windows XP) hosting the EFS encrypted files is gone. I do not have a backed up key file.
Is it possible to recover the encrypted files with the present elements?
I tried aefsdr from elcomsoft but I didn't see any way to direct it to use the registry file. Also, it didn't find any encrypted files, possibly because the attributes identifying them are absent.