Partition
From Digital Forensics Framework
- Synopsis : partition path [--parent parent]
The purpose of the partition module is to create nodes for the different partitions on a volume, as an hard disk drive for example. To use it, you must already have a dump loaded into DFF virtual file system.
To launch the module, you can double click on the dump node or right-clicking on it and go to the Open with -> File system -> partition menu.
As a result, partition will create one node name PartX (where X is the number of the partition) for each partitions found, which can then be analyzed by others modules (three in the following example).
