Hex Value Interpreter
It's my first time using the FTK imager and I am very confused and not sure on how to find this. What is the unallocated space, what is the logical sector, the physical sector of the boot record? How many bytes are there in the sector? How many sectors are in a cluster? PLEASE HELP! I am super lost. Thank you in advance!
Hex Value Interpreter Type Size Value signed integer 1-8 unsigned integer 1-8 FILETIME [UTC) FILETIME [local] 8 DOS date 2 DOS time 2 time_t [UTC] 4 time_t [local]
0000000000000000-00000000000000000000000 00000lb0 00000lc0 DO 00000ld0 DO 00 00 DO DO D0-00 00 00000le0 00 00-00 DO 00000lf0 T 55 00000200 00 00 00 00 00 00 00 00 DO 00 00 00 00000210 00 00 00 00 00 00 0000 00 00 00 00 00 00 00000220 00 00 00 00 00 00 DO 0000 00 00 00 00 00 00 00000230 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 00000240 00 00 0000 00 00-00 00 00 00 00 00 00 00 00000250 00 00 00 00 00 00 00 DO DO DO 00 00 00000260 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 00000270 00 0000 00 00 00 00 0000 00 00 00 00 00 00 00 00000280 00 00 00 00 0000 00 00 00 00 00 00 00000290 00 00 00 00 00 00 00 0000 00 00 00 00 00 00