Join Jungwoo Ryoo for an in-depth discussion in this video Understanding partitioning, part of Computer Forensics Essential Training.
…On Linux, a storage device is represented as a file.…For example, a physical SATA or a serial ATA hard drive…shows up as /dev/sda in the file system the second physical…SATA hard drive will show up as /dev/sdb in the file system.…A USB drive I just plugged in to this machine is now going to…show up as dev/sdd in the file system.…
The numbers after drive letters such as sda or…sdb represent partitions or logical drives.…I'll use fdisk to demonstrate this concept, type sudo fdisk -l,…you'll need sudo command before fdisk because…you need to execute this command as a privileged user, press enter.…If the operating system asks for entering your password, go ahead and type it in.…
I already typed in my password,…which is why it shows up without typing the password.…As you can see, /dev/sda1 is…the first partition of the first physical drive on my machine, dev/sda2…is the second partition on my physical hard drive SDA, and so on.…When I see something like deb/sda5, what that…means is that it's a logical partition inside an extended partition.…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.