fsutil – a useful tool
While studying for my GIAC Certified Forensic Examiner (GCFE) certification, I came across a paragraph in my study material that is explaining unallocated vs. allocated diskspace and what can be recovered. The material says: “Windows writes file information in sector-sized chunks. If the file is 1280 bytes in length and the cluster size is 2048, … Continue reading fsutil – a useful tool