<<< Disk Image Analysis | Index | Volume System Analysis (cont.) >>> |
Volume systems organize the disk image into one or more volumes (aka partitions).
Partition tables are normally located near the beginning of the disk image.
Autopsy / TSK supports variety of DOS, GPT, Mac, BSD, and Solaris partitions
<<< Disk Image Analysis | Index | Volume System Analysis (cont.) >>> |