CRJ167: DMACC Forensic File Systems - Flipped-Blended Class
$BITMAP Video lecture provided 1 Week prior to class meeting
Activities Done in Face-to-Face class
From the $BITMAP, starting at offset 400 below (meaning that there are 400 bytes before these), list the clusters that are NOT allocated.
0400 FF FF FF FF FF FF FF FF 35 02 FF FF FF FF FF FF
0416 FF FE 0F FF FF FF FF FF FF FF FF FF 46 FF FF FF
0432 FF FF FF FF FF FF FF FF FF 00 FF FF D1 FF FF FF
0448 FF FF FF EF
Answer key:
Offset Byte Bits Unallocated Cluster
408 35 0011 0101 3265, 3267, 3270 - 3271
409 02 0000 0010 3272, 3274 - 3279
417 FE 1111 1110 3336
418 0F 0000 1111 3348 - 3351
428 46 0100 0110 3424, 3427 - 3429, 3431
441 00 0000 0000 3528 - 3535
444 D1 1101 0001 3553 - 3555, 3557
451 EF 1110 1111 3612
DATA ATTRIBUTE Runlist video lecture provided 1 Week prior to class meeting
Activities Done in Face-to-Face class
Using the image file 11_MFT.E01, complete the following spreadsheet table for 3 files.
