Forensic Examination of Digital Evidence
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
SPECIAL REPORT / APR. 04<br />
Hard Drive <strong>Evidence</strong> Worksheet<br />
Case Number:<br />
Laboratory Number:<br />
Exhibit Number:<br />
Control Number:<br />
Hard Drive #1 Label Information [Not Available ] Hard Drive #2 Label Information [Not Available ]<br />
Manufacturer:<br />
Manufacturer:<br />
Model:<br />
Model:<br />
Serial Number:<br />
Serial Number:<br />
Capacity: Cylinders: Capacity: Cylinders:<br />
Heads: Sectors: Heads: Sectors:<br />
Controller Rev.<br />
Controller Rev.<br />
IDE 50 Pin SCSI IDE 50 Pin SCSI<br />
68 Pin SCSI 80 Pin SCSI Other 68 Pin SCSI 80 Pin SCSI Other<br />
Jumper: Master Slave Jumper: Master Slave<br />
Cable Select Undetermined Cable Select Undetermined<br />
Hard Drive #1 Parameter Information<br />
DOS FDisk PTable PartInfo Linux FDisk SafeBack EnCase Other:<br />
Capacity: Cylinders: Heads: Sectors:<br />
LBA Addressable Sectors:<br />
Formatted Drive Capacity:<br />
Volume Label:<br />
Partitions<br />
Name: Bootable? Start: End: Type:<br />
Hard Drive #2 Parameter Information<br />
DOS FDisk PTable PartInfo Linux FDisk SafeBack EnCase Other:<br />
Capacity: Cylinders: Heads: Sectors:<br />
LBA Addressable Sectors:<br />
Formatted Drive Capacity:<br />
Volume Label:<br />
Partitions<br />
Name: Bootable? Start: End: Type:<br />
Hard Drive <strong>Evidence</strong> Worksheet Page 1 <strong>of</strong> 2<br />
46
Change language