Hi, I'm relatively new to computer forensics and recently read that one of the first stages in an analysis should be to read the sectors per cluster from the hard drive and also the contents of the partition table.
I believe i am right in saying that the sectors per cluster information is stored in the BPB of the VBR? Perhaps this information is also found in the MBR?
Anyway, i would like to know how to view this information in a readable format and also if there are any programs that will simply display the contents of the partition table on screen for me, can anyone help?
I recently downloaded PartInfo, however when i try to run it an error message appears saying that "an application has attempted to directly access the hard disk, which cannot be supported". I'm thinkin that the exe must need to be made into an ISO and the computer set to boot to CD in the BIOS?
Thanks for taking the time to read this, and many thanks for any replies/help.
i hate to bump topics but i take it nobody knows?
Uh, one day and you bump?
sorry, as you can gather i'm new to this forum, on other forums when a topic falls down over around 5 posts or so it isn't going to get a reply…