This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.
56066761 page views since August 2004
Computer Forensics World: Forums
Computer Forensics World :: View topic - disk signature
bebbles Newbie Joined: Dec 16, 2012 Posts: 4
Posted: Sun Jan 06, 2013 6:49 am Post subject: disk signature
Isn't the disk signature supposed to be located at offset 440 of the MBR? Can't seem to match it up in my NTFS file and Registry. Please correct me if i am a little off.
PreferredUser Newbie Joined: Jan 01, 2007 Posts: 1130 Location: USA
Posted: Tue Jan 08, 2013 8:44 am Post subject:
The disk signature is optional.
+1B8h +440 Description: 32-bit disk signature
Disk signature (optional, UEFI, Windows NT/2000/Vista/7
and other OSes) Size in Bytes 4
+1BCh +444 Description: 0000h Size in Bytes 2
All times are GMT + 10 Hours
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
TMs property of their respective owner. Comments property of posters. © 2007 Computer Forensics Science World. Digital forensic computing news syndication: or Software is copyrighted phpnuke.org (c)2003, and is free under agreement. All Rights Are Reserved.