fsutil – a useful tool

While studying for my GIAC Certified Forensic Examiner (GCFE) certification, I came across a paragraph in my study material that is explaining unallocated vs. allocated diskspace and what can be recovered.  The material says: “Windows writes file information in sector-sized chunks.  If the file is 1280 bytes in length and the cluster size is 2048, … Continue reading fsutil – a useful tool

Design a site like this with WordPress.com
Get started