Support for File Sy...
 
Notifications
Clear all

Support for File System Forensic Byte Offset , Field Length

2 Posts
2 Users
0 Reactions
636 Views
(@wasantha)
New Member
Joined: 9 years ago
Posts: 1
Topic starter  

Hi,

I am studying for a Forensic certification and found the below question in a sample. Need someones support for Calculating how many hidden sectors, total sectors, sector size when ONLY following information is available.Is this information is enough ?

Byte Offset , Field Length , Name

11,2,Bytes Per Sector
13,1,Sectors Per Cluster
28.4.Hidden Sectors
40,8,Total Sectors
48,8,Logical Cluster # for the MFT
56,8,Logical Cluster # for the MFT Mirror

Thanks
Wasantha


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

What do you mean "calculate"? ?
hidden sectors=28.4.Hidden Sectors
total sectors=40,8,Total Sectors
sector size=11,2,Bytes Per Sector

There is nothing to "calculate", you simply read the values in those fields.

jaclaz


   
ReplyQuote
Share: