Options
How can I identify hdd serial number and partition scheme on Windows?
Question for you forensics folks xD
As part of my training on digital forensics, I've got an image of a partition and I need to answer a couple of questions like "Which operating system is installed?" Who are the users?" etc... One of the question is related to the HDD, asking for its serial number, partitions and size.
I'm using Autopsy to load the image, and most of the questions are answered just looking around, but I can't find the answer to the HDD question. The size is visible clicking on "Image details", but how can I know the serial number and its partition scheme? Is there any file in Windows where this information is stored?
As part of my training on digital forensics, I've got an image of a partition and I need to answer a couple of questions like "Which operating system is installed?" Who are the users?" etc... One of the question is related to the HDD, asking for its serial number, partitions and size.
I'm using Autopsy to load the image, and most of the questions are answered just looking around, but I can't find the answer to the HDD question. The size is visible clicking on "Image details", but how can I know the serial number and its partition scheme? Is there any file in Windows where this information is stored?