I’m trying to find a “good” analogy to explain CHS translated geometry to a court room. Something simple that the jury can relate to that isn’t too techie. I need something that will aid in the prevention of unskilled attorneys using geometry translation to confuse and divert the attention and credibility of the examination process.
Just curious, why do you need to do this?
Modern drives do not have a CHS as we are used to with older drives and floppies (see the over written data thread for info on ZBR).
In reality it has been a long time since any operating system has addressed a file by it's CHS - LBA has been around for a long time now and as far as a user is concerned a drive consists of (say) 2,000,000,000,000 sectors numbered from 1 to 1,999,999,999,999.
There seems to be a real terndency for some poeple to over complicate things in this industry (not accusing you of this as I know nothing about your case) - it is the job of the forensic analyst to simplify things for the court not complicate it. Agreed some things are complicated by nature, but some are complicated by the percieved need of some investigators to make themselves look more knowlegeable
Understood and definitely not an examiner trying over complicate things or making myself look more knowledgeable. I know that CHS is a legacy value for floppy disks and older hard drives and am aware of referencing size by sectors (LBA). The question was intended to SIMPLFY explaining the CHS translated geometry to an audience. I am looking to get a good analogy for this process not to over complicate the matter. Historical evidence can date back years with multiple technologies involved depending on when and how it was introduced.