[sleuthkit-users] [Autopsy] reading sectors
Brought to you by:
carrier
From: Filip N. <fil...@gm...> - 2013-07-04 13:02:38
|
hello everyone, just quick question. I have acquired disk with several partitions, checked MBR - autopsy automatically extracted all information about starting sectors and size. How can I find hex page (first secotor) for each partition? I tried manually, with success for first two partitions (where numbers are low..): no. starting sector - length vol1. 0-2048 (page 65) vol2. 2048-204800 (page 6465) vol3 842065920-841859072 (page?) ... Am I doing anything wrong, or is there an answer? I would be grateful for any comments, suggestions filip |