Encrypting File System
E186766
Encrypting File System is a Windows feature that provides transparent file-level encryption to protect data stored on NTFS volumes.
All labels observed (2)
| Label | Occurrences |
|---|---|
| Encrypting File System canonical | 2 |
| Encrypting File System (EFS) | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T1653982 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Encrypting File System Context triple: [Windows 2000, introducedFeature, Encrypting File System]
-
A.
BitLocker (device encryption variant)
BitLocker (device encryption variant) is a streamlined, automatic disk encryption feature designed for certain Windows devices, particularly tablets and lightweight PCs, to protect data by encrypting the system drive with minimal user configuration.
-
B.
Transparent Data Encryption
Transparent Data Encryption is a database security feature that encrypts data at rest by automatically encrypting database files and backups to protect against unauthorized access to stored data.
-
C.
ZFS file system
The ZFS file system is a combined file system and logical volume manager known for its advanced features like data integrity verification, snapshots, and efficient storage management, originally created for enterprise-grade reliability and scalability.
-
D.
XFS
XFS is a high-performance 64-bit journaling file system originally developed by SGI, widely used on Linux for handling large files and parallel I/O workloads.
-
E.
FileVault
FileVault is Apple’s built-in full-disk encryption system for macOS that protects data by encrypting the contents of a Mac’s startup disk.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Encrypting File System Target entity description: Encrypting File System is a Windows feature that provides transparent file-level encryption to protect data stored on NTFS volumes.
-
A.
BitLocker (device encryption variant)
BitLocker (device encryption variant) is a streamlined, automatic disk encryption feature designed for certain Windows devices, particularly tablets and lightweight PCs, to protect data by encrypting the system drive with minimal user configuration.
-
B.
Transparent Data Encryption
Transparent Data Encryption is a database security feature that encrypts data at rest by automatically encrypting database files and backups to protect against unauthorized access to stored data.
-
C.
ZFS file system
The ZFS file system is a combined file system and logical volume manager known for its advanced features like data integrity verification, snapshots, and efficient storage management, originally created for enterprise-grade reliability and scalability.
-
D.
XFS
XFS is a high-performance 64-bit journaling file system originally developed by SGI, widely used on Linux for handling large files and parallel I/O workloads.
-
E.
FileVault
FileVault is Apple’s built-in full-disk encryption system for macOS that protects data by encrypting the contents of a Mac’s startup disk.
- F. None of above. chosen
Statements (50)
| Predicate | Object |
|---|---|
| instanceOf |
NTFS feature
ⓘ
Windows security feature ⓘ file encryption technology ⓘ |
| accessControlDependsOn | user account credentials ⓘ |
| alsoKnownAs | EFS ⓘ |
| canBeDisabledBy | removing EFS certificates ⓘ |
| category |
Microsoft Windows security
ⓘ
data-at-rest protection ⓘ file system security ⓘ |
| complements |
BitLocker Drive Encryption
ⓘ
linked to:
BitLocker (device encryption variant)
|
| configuredVia |
Windows Explorer file properties
ⓘ
cipher.exe command-line tool ⓘ |
| dataIsDecrypted | on-the-fly for authorized users ⓘ |
| dataIsEncrypted | on-the-fly when written to disk ⓘ |
| developedBy | Microsoft ⓘ |
| encryptionGranularity | per-file basis ⓘ |
| encryptionIs |
transparent to most applications
ⓘ
user-specific ⓘ |
| encryptionLevel | file-level encryption ⓘ |
| encryptionScope |
folders
ⓘ
individual files ⓘ subfolders ⓘ |
| fileSystemSupport | NTFS ⓘ |
| integratesWith | Windows logon ⓘ |
| introducedIn | Windows 2000 ⓘ |
| keyType |
EFS certificate private key
ⓘ
File Encryption Key ⓘ |
| managedBy | Group Policy ⓘ |
| notDesignedFor | full disk encryption ⓘ |
| notSupportedOn |
FAT
ⓘ
exFAT ⓘ |
| operatingSystem |
Microsoft Windows
ⓘ
linked to:
Windows
|
| primaryPurpose |
prevent unauthorized access to files
ⓘ
protect data at rest ⓘ |
| requires |
NTFS volume
ⓘ
professional or higher Windows editions in many versions ⓘ |
| risk | data loss if keys or certificates are not backed up ⓘ |
| securityDependsOn |
Windows account password strength
ⓘ
protection of private keys ⓘ |
| storesKeysIn | user profile ⓘ |
| storesMetadataIn | NTFS file attributes ⓘ |
| supports |
Data Recovery Agent
ⓘ
export of EFS certificates and keys ⓘ import of EFS certificates and keys ⓘ multiple authorized users per file ⓘ offline files encryption ⓘ roaming user profiles (with key management) ⓘ |
| transparency | transparent to applications ⓘ |
| uses |
public key cryptography
ⓘ
symmetric key encryption ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Encrypting File System Description of subject: Encrypting File System is a Windows feature that provides transparent file-level encryption to protect data stored on NTFS volumes.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: Encrypting File System