CFP last date
16 December 2024
Call for Paper
January Edition
IJAIS solicits high quality original research papers for the upcoming January edition of the journal. The last date of research paper submission is 16 December 2024

Submit your paper
Know more
The week's pick
Responsive image
Ordered Frequent Itemsets Matrix Based On Fp-Tree Structure And Apriori Algorithm

Abdulkader M. Al-Badani Abdualmajed A. Al-Khulaidi
Random Articles
Reseach Article

Analyzing Master Boot Record for Forensic Investigations

by Ghania Al Sadi
journal cover thumbnail

International Journal of Applied Information Systems
Foundation of Computer Science (FCS), NY, USA
Volume 10 - Number 8
Year of Publication: 2016
Authors: Ghania Al Sadi
10.5120/ijais2016451541

Ghania Al Sadi . Analyzing Master Boot Record for Forensic Investigations. International Journal of Applied Information Systems. 10, 8 ( April 2016), 22-26. DOI=10.5120/ijais2016451541

@article{ 10.5120/ijais2016451541,
author = { Ghania Al Sadi },
title = { Analyzing Master Boot Record for Forensic Investigations },
journal = { International Journal of Applied Information Systems },
issue_date = { April 2016 },
volume = { 10 },
number = { 8 },
month = { April },
year = { 2016 },
issn = { 2249-0868 },
pages = { 22-26 },
numpages = {9},
url = { https://www.ijais.org/archives/volume10/number8/883-2016451541/ },
doi = { 10.5120/ijais2016451541 },
publisher = {Foundation of Computer Science (FCS), NY, USA},
address = {New York, USA}
}
%0 Journal Article
%1 2023-07-05T19:02:57.486765+05:30
%A Ghania Al Sadi
%T Analyzing Master Boot Record for Forensic Investigations
%J International Journal of Applied Information Systems
%@ 2249-0868
%V 10
%N 8
%P 22-26
%D 2016
%I Foundation of Computer Science (FCS), NY, USA
Abstract

As a main knowledge, extracting information for examination to be used as evidence or even to recover lost data need a full understand of logical and physical storage media structure used to store the required information in the computer. In digital forensic analysis, Master Boot Record is captured to extract the required information of the hard disk to support the investigation process. This research is studying the MBR structure by providing an experiment of the MBR analysis.

References
  1. R. G. Minnich, “Operating System,” 2004.
  2. Microsoft, “Windows support for hard disks that are larger than 2 TB,” 2013. [Online]. Available: http://support.microsoft.com/kb/2581408#appliesto.
  3. P. ARNTZ, “Meet the Master Boot Record,” 2014. [Online].Available:https://blog.malwarebytes.org/security-threat/2014/09/meet-the-master-boot-record/.
  4. M. TechNet, “Master Boot Record,” 2011. [Online]. Available:http://technet.microsoft.com/enus/library/cc976786.aspx.
  5. M. TechNet, “Disk Concepts and Troubleshooting,” 2011.[Online].Available:http://technet.microsoft.com/en-us/library/cc977219.aspx.
  6. J. Gu and W. Ji, “A secure bootstrap based on trusted computing,” Proc. - 2009 Int. Conf. New Trends Inf. Serv. Sci. NISS 2009, no. 3, pp. 502–504, 2009.
  7. R. McKemmish, “What is forensic computing?,” Trends Issues Crime Crim. Justice, vol. 118, no. 118, pp. 1–6, 1999.
Index Terms

Computer Science
Information Sciences

Keywords

MBR Bootstrap Partition Table Magic Number Forensic Investigation

Powered by PhDFocusTM