8. Disk Geometry and Partitions

• MBR -> 64-bytes of Partition Table -> 16-byte Partition Entry (or unpartitioned space.)

• VBR is in the first sector of any partition.

• NOTE: Deleted partitions may contain a lot of evidence; see EnCase Lesson 23 for details.