Question

In: Computer Science

Purpose:To begin investigating the FAT16 file system on a USB memory device. In particular, you will...

Purpose:To begin investigating the FAT16 file system on a USB memory device. In particular, you will add a file to a FAT16 formatted device and observe the changes made to the FAT table.

Deliverables: For Steps 7, 8, 11, and 12 you are to describe, in detail, what happens to the FAT when a file is added. Be specific and explain WHAT happened and WHY. It is acceptable to add small screen shots to you DOC file, but only as an aid in describing your observations.

Activities:

  1. Use a USB flash drive that contains NO data that you need.
    1. You will want this flash drive to be as small as possible!
    2. Really! You want this to be as small as possible.
  2. Format the drive with the FAT16 file system.
    1. During the format process name your drive “YourName-1a”
  3. Using FTK Imager add this device as an evidence item.
  4. Select FAT1 and do a screen shot of the Hex View window.
  5. Close FTK Imager.
  6. Add a small text file to the root directory of the Flash drive.
  7. Using FTK Imager add this device as an evidence item.
    1. Find FAT1 and do a screen shot of the Hex View window.
    2. Compare the 2 screen shots and write down the chain of sectors that contain the text file.
  8. Select the text file in the File List window.
    1. Look at the Status Bar and identify the sector number.
    2. Compare that cluster number to the Cluster Chain. They should match (+1 offset) If they don’t match, repeat the process starting at step 7 to identify your problem.
  9. Close FTK Imager
  10. Add a medium sized image file to the root directory of the Flash drive.
  11. Using FTK Imager add this device as an evidence item.
    1. Find FAT1 and do a screen shot of the Hex View window.
    2. Compare the 2 screen shots and write down the chain of sectors that contain the image file.
  12. Select the image file in the File List window.
    1. Look at the Status Bar and identify the sector number.
    2. Compare that cluster number to the Cluster Chain. They should match (+1 offset) If they don’t match, repeat the process starting at step 7 to identify your problem.
  13. Close FTK Imager

Solutions

Expert Solution

if you have any doubt then please ask me without any hesitation in the comment section below , if you like my answer then please thumbs up for the answer , before giving thumbs down please discuss the question it may possible that we may understand the question different way and we can edit and change the answers if you argue, thanks :)


Related Solutions

Provide an outline of the following essential managers of an operating system: memory manager, processor manager, device manager, network manager and file manager
1.1 Provide an outline of the following essential managers of an operating system: memory manager, processor manager, device manager, network manager and file manager 1.2 Name and describe 5 key concepts about an operating system that you think a typical user needs to understand  1.3. Give special examples of situations where battery performance is of crucial importance to a mobile device user. What specific recommendations would you make to battery developers to improve the user experience with mobile devices  
Linux Ubuntu 1. Use the appropriate commands to locate the device file used by the device,...
Linux Ubuntu 1. Use the appropriate commands to locate the device file used by the device, mount the filesystem to a directory of your choice, and check the filesystem for errors. 2. Finally, add a line to /etc/fstab to ensure that the filesystem can be easily mounted in the future (this line should not automount the filesystem at boot time). You have to document all your steps and provide the screenshot of your work process.
An alliteration is a stylistic device in which successive words begin with the same letter (or...
An alliteration is a stylistic device in which successive words begin with the same letter (or sometimes the same sound). In our case we will only consider alliterations that follow the "same letter" property. It is often the case that short words (three letters or less) are inserted to make the sentence make sense. Here are some examples of alliterations: alliteration's artful aid Peter parker's poems are pretty Round the rugged rock the ragged rascal ran Peter Piper picked a...
A federal watchdog is investigating an advertising claim that a certain device reduces gasoline consumption in...
A federal watchdog is investigating an advertising claim that a certain device reduces gasoline consumption in cars. Seven devices have been tested and installed in cars belonging to the institution. To compare performance under standard conditions, the miles each car travels with a gallon of gasoline are measured in both situations, before and after installation. Automobiles 1 2 3 4 5 6 7 Mpg before 19.1 19.9 17.6 20.2 23.5 26.8 21.7 Mpg after 20.0 23.7 18.7 22.3 23.8 19.2...
Why is a device such as a tape-drive a poor secondary storage device for Random/Direct access to a file?
Why is a device such as a tape-drive a poor secondary storage device for Random/Direct access to a file?
For this assignment you are required to build a system using BBC Micro:bit device. You will...
For this assignment you are required to build a system using BBC Micro:bit device. You will use the Micro:bit to gather data automatically using its sensors; and make it available on the internet. You are to deliver this data in a rigorous fashion to a PC attached via USB using the onboard Python, and then to run a local Python server on the PC with appropriate web pages to serve the result locally. Remote access to the PC is not...
In the Linux file system, the majority of the file system code exists in the kernel....
In the Linux file system, the majority of the file system code exists in the kernel. research the anatomy of the Linux file system, then discuss the effectiveness or ineffectiveness of this type of architecture. In addition, explain why you feel the way you do and provide support
Lab 3 Java Classes and Memory Management Multi-file Project In this lab you will gain experience...
Lab 3 Java Classes and Memory Management Multi-file Project In this lab you will gain experience using classes and arrays of classes. Use the following as the beginning of a student abstract data type. public class Student { private String fName ; private String lName ; private double[] grades; } This class should be in the package com.csc241. Write a program that prompts a user for a total number of students and dynamically allocates memory for just that number of...
Implement a Linux Block Driver which simulates a block device with a region of memory init,...
Implement a Linux Block Driver which simulates a block device with a region of memory init, exit, and IO functionalities must be included. Please use either C or C++ Programming for this Thank You!
Using C, use mmap() to map a file to memory, and then search through it. For...
Using C, use mmap() to map a file to memory, and then search through it. For example, get and print out the first character of each line in the file: abc def ghi
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT