Chapter 5: Working with Windows and CLI Systems Flashcards
ZBR
Zone bit recording; a property handled at the drive’s hardware or firmware level which optimizes tracks for increased data capacity.
NTFS file system
A standard file system, Windows usually uses it by default. It’s purpose is for long file names, data protection and recovery, and implements security through directory and file.
Fat File system
File structure database that Microsoft originally designed for floppy disks. Three current FAT versions: FAT16, FAT32, and exFAT (used by Xbox game systems).
exFAT
Extensible File Allocation Table; introduced by Microsoft in 2006 and optimized for flash memory such as USB flash drives and SD cards.
Disk structure
A disk is accessed as an array: sector 0 is the first sector of the top track of the outmost cylinder. The next sectors of the same track are then ordered. Then, sectors from the next track are ordered. After all
the sectors of all the tracks are ordered, we move to the next cylinder. The innermost is the last cylinder.
Master Boot record partition table
Stores information about partitions on a disk.
HEX E5 (0xE5) for deleted files
Will replace the first letter of the file name.
$LogFile
Previous transactions are stored here to allow recovery after a system failure in the NTFS volume.
The MFT record identifier FILE at offset 0x00
MFT record provides cluster addresses where the file is stored on the drive’s partition,
referred to as data runs.
Hive
Logical group of keys, subkeys, and values in the registry that has a set of supporting files loaded into memory when the operating system is started or a user logs in.
SAM.dat
Security Accounts Manager; a database file in Windows XP, Windows Vista, Windows 7, 8.1 and 10 that stores users’ passwords.
Resilient File System
Designed to address very large data storage needs such as the cloud.
bootstrap process
Contained in ROM, tells the computer how to proceed and displays the key or keys you press to open the CMOS setup screen.
