What command would Harrison use to view the detailed partition layout for a GPT disk and MBR details in Windows?

Study for the EC-Council Digital Forensics Essentials (DFE) Test. Enhance your skills with multiple choice questions, each with detailed hints and explanations. Get ready to ace your exam!

The command that Harrison would use to view the detailed partition layout for a GPT disk and MBR details in Windows is mmls. This command is part of the Sleuth Kit, a collection of command-line tools that are specifically designed for forensic analysis of disk images and file systems.

Using mmls allows users to display the layout of partitions on a disk image, including both Master Boot Record (MBR) and GUID Partition Table (GPT) structures. This capability is crucial in digital forensics as it helps investigators understand how data is organized on the disk and identify where to look for specific files or system artifacts.

Other tools like parted and gparted are primarily used in Linux environments for partition management and might not be suitable for viewing MBR details specifically in the context of forensic analysis. Fdisk, while a command-line utility present in various systems for disk partitioning purposes, mainly focuses on MBR-based partitions and does not provide as comprehensive details for GPT disks as mmls does.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy