I'm working on trying to create a Visual Basic 2005 application that will be used for forensic purposes. Currently most of the tools we use are dos based without a graphic interface.
Whats I'd like to find out is how to look up a drive. Once a driev is selected I was to have a couple options available. If the user wants to see all the sector and cluster I want to be able to browse through them. Espcially important is in the cluster infomration what cluster the current cluster is ponting to, and even to possible modify this cluster number (this is important since criminals will sometimes try to corrupt files by changing the cluster information to point to a different file, if we can fix this then we can recover the corrupted file).
The next options I'd like to have is a basic file list, with start cluster and ending cluster, and size.
Now here's the big trick. When the drive is first selected, it will need to determine if the drive is NTFS or FAT32. Since information on these different drive is set differently.
Having done some searches on the internet, I have found how to get just basic drive information (size, dates, file names)....but nothing hardcore like cluster information.
Thanks.
Start Free Trial
