Inside Microsoft Windows 2000
File System Forensic Analysis
Hi-index | 0.00 |
As storage requirements increase, it is becoming more common for computers to use disk spanning techniques to make multiple disks look like one large disk, called a logical volume. This impacts an investigator because she must be able to recreate the logical volume so that the computer can be analyzed. In this paper, we look at the basic concepts of disk spanning and we look at three Windows and Linux implementations.