CFP last date
15 May 2024
Reseach Article

Analyzing Master Boot Record for Forensic Investigations

by Ghania Al Sadi
International Journal of Applied Information Systems
Foundation of Computer Science (FCS), NY, USA
Volume 10 - Number 8
Year of Publication: 2016
Authors: Ghania Al Sadi
10.5120/ijais2016451541

Ghania Al Sadi . Analyzing Master Boot Record for Forensic Investigations. International Journal of Applied Information Systems. 10, 8 ( April 2016), 22-26. DOI=10.5120/ijais2016451541

@article{ 10.5120/ijais2016451541,
author = { Ghania Al Sadi },
title = { Analyzing Master Boot Record for Forensic Investigations },
journal = { International Journal of Applied Information Systems },
issue_date = { April 2016 },
volume = { 10 },
number = { 8 },
month = { April },
year = { 2016 },
issn = { 2249-0868 },
pages = { 22-26 },
numpages = {9},
url = { https://www.ijais.org/archives/volume10/number8/883-2016451541/ },
doi = { 10.5120/ijais2016451541 },
publisher = {Foundation of Computer Science (FCS), NY, USA},
address = {New York, USA}
}
%0 Journal Article
%1 2023-07-05T19:02:57.486765+05:30
%A Ghania Al Sadi
%T Analyzing Master Boot Record for Forensic Investigations
%J International Journal of Applied Information Systems
%@ 2249-0868
%V 10
%N 8
%P 22-26
%D 2016
%I Foundation of Computer Science (FCS), NY, USA
Abstract

As a main knowledge, extracting information for examination to be used as evidence or even to recover lost data need a full understand of logical and physical storage media structure used to store the required information in the computer. In digital forensic analysis, Master Boot Record is captured to extract the required information of the hard disk to support the investigation process. This research is studying the MBR structure by providing an experiment of the MBR analysis.

References
  1. R. G. Minnich, “Operating System,” 2004.
  2. Microsoft, “Windows support for hard disks that are larger than 2 TB,” 2013. [Online]. Available: http://support.microsoft.com/kb/2581408#appliesto.
  3. P. ARNTZ, “Meet the Master Boot Record,” 2014. [Online].Available:https://blog.malwarebytes.org/security-threat/2014/09/meet-the-master-boot-record/.
  4. M. TechNet, “Master Boot Record,” 2011. [Online]. Available:http://technet.microsoft.com/enus/library/cc976786.aspx.
  5. M. TechNet, “Disk Concepts and Troubleshooting,” 2011.[Online].Available:http://technet.microsoft.com/en-us/library/cc977219.aspx.
  6. J. Gu and W. Ji, “A secure bootstrap based on trusted computing,” Proc. - 2009 Int. Conf. New Trends Inf. Serv. Sci. NISS 2009, no. 3, pp. 502–504, 2009.
  7. R. McKemmish, “What is forensic computing?,” Trends Issues Crime Crim. Justice, vol. 118, no. 118, pp. 1–6, 1999.
Index Terms

Computer Science
Information Sciences

Keywords

MBR Bootstrap Partition Table Magic Number Forensic Investigation