What are bad blocks, and how do you find them??
What will be an ideal response?
?All disks have more storage capacity than the manufacturer states. For example, a 240 GB disk might actually have 240.5 GB free space because disks always have bad sectors. Windows doesn't keep track of bad sectors, but Linux does in an inode called the bad block inode. The root inode is inode 2, and the bad block inode is inode 1. Some forensics tools ignore inode 1 and fail to recover valuable data for cases. Someone trying to mislead an investigator can access the bad block inode, list good sectors in it, and then hide information in these supposedly "bad" sectors.To ?nd bad blocks on your Linux computer, you can use the badblocks command, although you must log in as root to do so. Linux includes two other commands that supply bad block information: mke2fs and e2fsck. The badblocks command can destroy valuable data, but the mke2fs and e2fsck commands include safeguards that prevent them from overwriting important information.
You might also like to view...
What is an application used in both schools and corporate training environments to deliver educational materials, track student interactions, and assess student performance.?
a. CRM b. SRM c. LMS
Virtual folders that display the contents of multiple folders, as if the files were all stored in one folder, are called ________
Fill in the blank(s) with correct word
Which of the following is NOT one of the ways that fraud investigations originate?
A) From the FBI B) From internal audits C) From anonymous tips D) From complaints by customers or vendors
What is an image backup and why would you use one?
What will be an ideal response?