Skip to main content
SpringerLink
Log in

Disk Geometry

  • Chapter
Forensic Computing

  • 1043 Accesses

In this chapter we look in detail at the geometry of floppy and hard disk drives to find out exactly how information is stored and how it might be hidden.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 64.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 84.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 109.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Reference

  • ANSI (1996) ANSI X3.279-1996 - AT Attachment Interface with Extensions (ATA-2), American National Standards Institute, 11 West 42nd Street, New York, NY 10036.

    Google Scholar 

  • Brouwer, A. E. (2005) Partition Types: List of Partition Identifiers for PCs. URL: www.win.tue.nl/∼aeb/linux/partitions/partition_types-1.html.

  • Clarke, A. R. M. and Powys-Lybbe, D. (1986) The Amstrad CP/M Plus, MML Systems Ltd, London.

    Google Scholar 

  • Collins,R. (2003) Dr Dobbs Microprocessor Resources, Protected Mode Basics,Copyright © 2003 Dr. Dobb’s Journal. URL: http://www.x86.org/articles/pmbasics/.

  • Davis, M. (1999) Forms of Unicode, President of the Unicode Consortium, IBM, 1 September. Downloaded from: http://icu.sourceforge.net/docs/papers/forms_of_unicode/.

  • Deyring, K.-P. (ed.) (2003) Serial ATA: High Speed Serialized AT Attachment, Revision 1.0a, 7 January.

    Google Scholar 

  • Duncan, R. (1988) Advanced MS-DOS Programming, Microsoft Press, Redmond, WA.

    Google Scholar 

  • EMS (1987), LOTUS(R)/INTEL(R)/MICROSOFT(R), EXPANDED MEMORY SPECIFICATION [1], Version 4.0, 300275-005, October. Copyright © 1987, Lotus Development Corporation, Intel Corporation, Microsoft Corporation.

    Google Scholar 

  • Finch, S. G. (ed.) (1995) Information Technology - AT Attachment Interface with Extensions (ATA-2),Working Draft,Proposed American National Standard,X3T10 948D,Revision 3, 17 January. URL: http://alpha1.dyns.net/files/Drive/d0948r4c.pdf.

  • IBM (1995) No-ID Sector Format. Dr Steven R Hetzler, IBM Research Division, Almaden Research Center, San Jose, CA. Now Hitachi - see http://www.hitachigst.com/hdd/ipl/oem/tech/noid.htm

  • IBM (1998) IBM Deskstar 25GP and Deskstar 22GXP Hard Disk Drives, IBM Storage Systems Division,5600Cottle Road, San Jose, CA95193. Now Hitachi- see http://www.hitachigst.com/tech/techlib.nsf/techdocs/85256AB8006A31E587256A79006E5943/$file/djna_ds.pdf

  • IBM (1999) Disk Manager (version 9.47), 25 March, IBM Storage Systems Division, 5600 Cottle Road, San Jose, CA 95193. Now Hitachi - see http://www.hitachigst.com/hdd/support/download.htm#Diskmanager

  • Intel (1998a) SE440BX Motherboard Technical Product Specification,March,Intel Corporation, PO Box 5937, Denver, CO 80217-9808.

    Google Scholar 

  • Intel (1998b) SE440BX Motherboard Product Guide, Intel Corporation, PO Box 5937, Denver, CO 80217-9808.

    Google Scholar 

  • Lambert, M. (1995) Circular extended partitions: round and round with DOS, Virus Bulletin, September, p. 14. Mike Lambert, Virus Bulletin Ltd, The Quadrant, Abingdon, Oxfordshire, OX14 3YS.

    Google Scholar 

  • Lambert, M. and Moore, C. (1992) Circular Extended Partitions: A DOS Vulnerability or When the Magic Floppy Won’t Boot, Mike Lambert, Before Disaster Strikes, 1153 Dublin Place, Herndon, VA 22070, and Charles Moore, Automation Mentors, Inc., 12220 Wye Oak Commons, Burke, VA 22015.

    Google Scholar 

  • Lamers, L. J. (ed.) (1994) Information Technology - AT Attachment Interface for Disk Drives, Working Draft, Proposed American National Standard, X3T10 719D, Revision 4c.

    Google Scholar 

  • Landis, H. (1995a) How It Works - BIOS Types, CHS Translation, LBA and Other Good Stuff, Version 4a. URL: http://www.ata-atapi.com/

  • Landis, H. (1995b) How It Works - DOS Floppy Disk Boot Sector, Version 1a, hiw@sugs. talisman.com.

    Google Scholar 

  • Landis,H. (1997a) How It Works - Master Boot Record, Version 1b,hiw@sugs. talisman.com.

    Google Scholar 

  • Landis,H. (1997b) How It Works - Partition Tables, Version 1e.URL: hiw@sugs.talisman.com.

    Google Scholar 

  • Landis, H. (2001) How It Works: CHS Translation. URL: http://www.ata-atapi.com/

  • Landis,H. (2005) Information, Test Software and Consulting Services for Developers of Products using ATA (PATA, IDE/EIDE), Serial ATA (SATA), ATAPI, and CE-ATA and Other ATA Related Interfaces, 27 October. URL: http://www.ata-atapi.com/

  • Leach, P. J (1998) UUIDs and GUIDs, Internet Draft, Network Working Group, Microsoft, Rich Salz, Certco.

    Google Scholar 

  • Leach, P., Mealling, M. and Salz, R. (2004) A UUID URN Namespace, Internet Draft, Network Working Group.

    Google Scholar 

  • Majors, N. (1995) Technicians’ Guide to PC Hard Disk Subsystems, Data Recovery Labs. URL: http://www.programmersheaven.com/download/1471/download.aspx.

  • Mares, D. (2006) Computer Forensics and Data Analysis. Mares and Company, LLC, PO Box 464429, Lawrenceville, GA 30042-4429, USA. URL: http://www.dmares.com/

  • Maxtor (1996) Maxtor’s CrystalMax 1080 Model Number 84320A8,Rev A 3/18/96.URL: http://www.mysimon.com/Hard-Drives/9025-11620_8-20142861.html

  • Maxtor (2001) Big Drives: Breaking the 137 Gigabyte Barrier. URL: http://www.maxtor.com/ products/bigdrive/whitepaper.htm. No longer available.

  • Maxtor (2003) DiamondMax Plus 9 Specification, Maxtor Corporation, 500 McCarthy Boulevard, Milpitas, CA, 95035. DS-DiamondMaxPlus9-5/03-CL.

    Google Scholar 

  • McLean, P. T. (ed.) (1999) Information Technology - AT Attachment with Packet Interface - 5 (ATA/ATAPI-5), Working Draft, T13 1321D, Revision 1c, 31 August.

    Google Scholar 

  • McLean, P. T. (ed.) (2001) - AT Attachment with Packet Interface - 6 (ATA/ATAPI-6), Working Draft, T13 1410D, Revision 1e, 26 June.

    Google Scholar 

  • Mellanox (2002), Understanding PCI Bus, PCI-Express and InfiniBand Architecture, White Paper, Rev 1-20.Mellanox Technologies Inc, 2900 Stender Way, Santa Clara, CA 95054,USA. URL: http://www.mellanox.com/.

  • Messmer, H.-P. (2002) The Indispensable PC Hardware Book, 4th edn, Addison-Wesley, Reading, MA.

    Google Scholar 

  • Micro Firmware (1998) Issues with Hard Drives over 4GB. Micro Firmware Tech Support, 330 W Gray Street, Norman, Oklahoma. URL: http://www.allensmith.net/Storage/firmware/over4gb.htm

  • Microsoft Corporation (1999a) Problems Accessing FAT16 Drives Larger Than 2 GB,Article ID: Q127851,15January. URL: http://www.allensmith.net/Storage/HDDlimit/FAT16.htm

  • Microsoft Corporation (1999b) Description of FAT32 File System, Article ID: Q154997, 8 August, URL: http://support.microsoft.com/support/kb/Q154997

  • Microsoft Corporation (2000) Hardware White Paper, Microsoft Extensible Firmware Initiative FAT32 File System Specification, FAT: General Overview of On-Disk Format, Version 1.03, December 6.

    Google Scholar 

  • Microsoft Corporation (2003) Serial ATA in the Microsoft Operating System Environment, 18 July. URL: http://www.microsoft.com/whdc/device/storage/serialATA_FAQ.mspx

  • MicroSystems (undated) POST CODE MASTER Version 1.40, MicroSystems Development, Inc. 4100 Moorpark Ave. Suite #104, San Jose, CA 95117.

    Google Scholar 

  • Mosteller, T. (1995) CMOSRAM2.EXE. Tellerware, 1872 Rampart Lane, Lansdale, PA 19446-5051.

    Google Scholar 

  • Patterson,D.A.,Gibson,G.A.and Katz,R.H. (1988) A case for redundant arrays of inexpensive disks (RAID), SIGMOD Conference, pp. 109-16.

    Google Scholar 

  • Phoenix (1995) BIOS Enhanced Disk Drive Specification Version 1.1, 9 May. Phoenix Technol-ogies Ltd, 2575 McCabe Way, Irvine, CA 92714. URL: http://www.phoenix.com/

  • Phoenix (1998) BIOS Enhanced Disk Drive Specification, Version 3.0, 12 March. Phoenix Technologies Ltd, 2575 McCabe Way,Irvine,CA 92714.URL: http://www.phoenix.com/

  • Postuma, P. (1995) BIOS Reporter, version 1.1. ppostuma@nbnet.nb.ca, 16 Fullyer Drive, Quispamsis, NB, Canada E2G 1Y7.

    Google Scholar 

  • PowerQuest (1996) PartitionMagic 3.0 User Guide, PowerQuest Corporation, 1083 N State Street, Orem, UT. URL: http://www.powerquest.com/

  • PowerQuest (1998) BootMagic User Guide, PowerQuest Corporation, PO Box 1911, Orem, UT. Now Symantec - see http://www.symantec.com/techsupp/home_homeoffice/products/pmagic/pmagic_8/manuals.html

  • Pratt, T. (2003), Serial ATA Interface on Client Systems, Dell White Paper, June. URL: http://www.dell.com/r&d.

  • Quantum (1996) Quantum Fireballâ„¢ 1.0/1.2/1.7/2.1/2.5/3.2/3.8GB AT Product Manual, Chapter 5, Table 5.1, Quantum Corporation.

    Google Scholar 

  • R v Aslett (2002), IN THE CROWN COURT AT MANCHESTER, T2001/0383, Wednesday 25th September, 2002, BEFORE: HIS HONOUR JUDGE GEAKE, REGINA -v- JONATHAN ASLETT, Transcript of the Official Palantype Note of Cater Walsh & Co., Suite, 410, Crown House, Kidderminster, DY10 2DH.

    Google Scholar 

  • Seagate (1991a) Specifications for ST-506. URL: http://www.seagate.com/support/disc/ specs/mfm/st506.html

  • Seagate (1991b) Specifications for ST-412. URL: http://www.seagate.com/support/disc/ specs/mfm/st412.html

  • Seagate (1994) FIND-ATA.EXE v1.0, An ATA Interface Identify Drive Utility. Seagate Technology, Inc., B-5 Technical Support, 920 Disc Drive, Scotts Valley, CA 95066. URL: http://www.infoatec.it/download/findat10.zip.

  • Seagate (1995a) SGATFMT4.EXE v4.0, Seagate Format Drive Utility. Seagate Technology, Inc. URL: http://www.infoatec.it/download/sgatfmt4.zip.

  • Seagate (1995b) NFDisc v1.20, Partition Record Display and Maintenance. Seagate Technology, Inc. URL: http://www.seagate-asia.com/sgt/korea/discutil.jsp.

  • Seagate(1997a) Cheetah4.5- to9.1-Gbyte Capacity Disc Drives. URL: http://www.seagate.com/, publication number 1480-002. No longer available.

  • Seagate (1997b) Low-level Formatting an ATA (IDE) Hard Drive. Seagate Technology, Inc., B-5 Technical Support,920Disc Drive, Scotts Valley, CA95066. URL: http://www.seagate.com/ww/v/index.jsp?vgnextoid=95f0781e73d5d010VgnVCM100000dd04090aRCRD&locale=en-US

  • Seagate (1997c) Seagate Fast ATA/Fast ATA-2 Fact Sheet. Seagate Technology, Corporate Communications. URL: http://www.seagate.com/support/kb/disc/fastfs.html.

  • Seagate (1998) FAQ Disk Manager Basics, BIOS Limitations. Seagate Technology, Inc. URL: http://www.seagate.com/support/kb/disc/bioslmt.html.

  • Stevens, C. E. (ed.) (2005) Information Technology - AT Attachment - 8 ATA/ATAPI Command Set (ATA8-ACS), Working Draft, T13 Project 1699D, Revision 1e, 20 June.

    Google Scholar 

  • Stockton, J. R. (2005) Date and Time Scales. URL: http://www.merlyn.demon.co.uk/ dayscale.htm.

  • Storage Networking Industry Association (2004) Common RAID Disk Data Format Specifi-cation, Revision 01.00.00, 14 December. URL: http://www.snia.org/tech_activities/ddftwg

  • Symantec (1999) Norton Utilities Version 4, User’s Guide,Norton Disk Editor.Symantec Corpo-ration, Peter Norton Group, 10201 Torre Avenue, Cupertino, CA 95014.

    Google Scholar 

  • Tischer, M. and Jennrich, B. (1996) PC Intern, The Encyclopedia of System Programming, Abacus, Data Becker Edition.

    Google Scholar 

  • Vidström,A. (2005) Computer Forensics and the ATA Interface, Technical Report FOI-R--1638--SE, February 2005, 1650-1942, Swedish Defence Research Agency, Command and Control Systems, Box 1165, SE-581 11 LINKÖPING, Sweden.

    Google Scholar 

  • Western Digital (1997a) Enhanced IDE Interface. Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • Western Digital (1997b) Drive Parameters, 25 March.Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • Western Digital (1998a) Large Disk Integration, 7 October. Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • Western Digital (1998b) 8.4 GB Capacity Barrier. Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • Western Digital (1999) EZ-Drive FAQ Sheet, 9 March.Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • Western Digital (undated a) User’s Guide WD1003V-MM1 Winchester Disk Controller (also MM2, SR1 and SR2). URL: http://www.wdc.com/.

  • Western Digital (undated b) Enhanced IDE Implementation Guide, Version 5, Western Digital Corporation, 8105 Irvine Center Drive, Irvine, CA 92618. URL: http://www.wdc.com/.

  • XMS (1991), eXtended Memory Specification (XMS), ver 3.0, January 1991. Copyright © 1988, Microsoft Corporation, Lotus Development Corporation, Intel Corporation, and AST Research, Inc.

    Google Scholar 

  • Zacker, C. (1995) Upgrading and Repairing Networks, Que, San Francisco, CA.

    Google Scholar 

Download references

Rights and permissions

Reprints and permissions

Copyright information

© 2007 Springer-Verlag London Limited

About this chapter

Cite this chapter

(2007). Disk Geometry. In: Forensic Computing. Springer, London. https://doi.org/10.1007/978-1-84628-732-9_5

Download citation

  • DOI: https://doi.org/10.1007/978-1-84628-732-9_5

  • Publisher Name: Springer, London

  • Print ISBN: 978-1-84628-397-0

  • Online ISBN: 978-1-84628-732-9

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation