Analyzing Master Boot Record for Forensic Investigations
Ghania Al · International Journal of Applied Information Systems · 2016
As a main knowledge, extracting information for examination to be used as evidence or even to recover lost data need a full understand of logical and physical storage media structure used to store the required information in the computer.In digital forensic analysis, Master Boot Record is captured to extract the required information of the hard disk to support the investigation process.This research is studying the MBR structure by providing an experiment of the MBR analysis.