{"id":922,"date":"2024-11-22T16:07:40","date_gmt":"2024-11-22T16:07:40","guid":{"rendered":"https:\/\/elusivedata.io\/?p=922"},"modified":"2025-07-18T18:04:35","modified_gmt":"2025-07-18T18:04:35","slug":"3-2","status":"publish","type":"post","link":"https:\/\/elusivedata.io\/fi\/3-2\/","title":{"rendered":"Navigointi GPT-osion merkint\u00e4rakenteessa rikosteknist\u00e4 analyysia varten. Osa 3."},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>\n

Osa 3<\/h1>\n

<\/p>\n

Johdanto<\/h2>\n

<\/p>\n

Edellisiss\u00e4 viesteiss\u00e4mme loimme pohjan GUID-osiointitaulukon (GPT) ymm\u00e4rt\u00e4miselle tarkastelemalla suojaavaa MBR:\u00e4\u00e4 ja GPT-otsikkoa. Nyt, osassa 3, keskitymme GPT-osion merkint\u00e4rakenteeseen. T\u00e4m\u00e4 GPT-kaavion t\u00e4rke\u00e4 osa tarjoaa yksityiskohtaisen kartan kaikista levyn osioista, ja jokainen merkint\u00e4 sis\u00e4lt\u00e4\u00e4 t\u00e4rke\u00e4\u00e4 tietoa tietyst\u00e4 osiosta. Kun ymm\u00e4rr\u00e4t GPT-osiotietueiden rakenteen ja toiminnan, saat kattavan k\u00e4sityksen siit\u00e4, miten GPT-j\u00e4rjestelm\u00e4 hallitsee osioita, mik\u00e4 mahdollistaa tehokkaamman analyysin, vianm\u00e4\u00e4rityksen ja tietojen palautuksen.<\/p>\n

<\/p>\n

GPT (GUID-osiointitaulukko) Osioiden merkint\u00e4rakenne (Array)<\/h2>\n

<\/p>\n

GUID-osiointitaulukon (GUID Partition Table, GPT) merkint\u00e4ryhm\u00e4 on t\u00e4rke\u00e4 osa GPT-osioj\u00e4rjestelm\u00e4\u00e4, jota k\u00e4ytet\u00e4\u00e4n kiintolevyn osioiden m\u00e4\u00e4rittelyyn ja hallintaan. Ajattele sit\u00e4 yksityiskohtaisena luettelona, johon kirjataan levyn jokaisen osion yksityiskohdat, kuten kirjaston luetteloon, jossa luetellaan jokaisen kirjan yksityiskohdat.<\/p>\n

<\/p>\n

GPT-merkint\u00e4rakenteen t\u00e4rkeimm\u00e4t osat:<\/h3>\n

<\/p>\n

Osio GUID<\/strong>: Jokaisella osiolla on yksil\u00f6llinen tunniste, joka tunnetaan nimell\u00e4 Partition GUID, joka varmistaa, ett\u00e4 jokainen osio voidaan tunnistaa yksiselitteisesti jopa eri j\u00e4rjestelmiss\u00e4.<\/p>\n

<\/p>\n

Yksil\u00f6llinen tunnus<\/strong>: T\u00e4m\u00e4 on toinen kullekin osiolle ominainen yksil\u00f6llinen tunniste, joka tarjoaa lis\u00e4kerroksen yksil\u00f6lliseen tunnistamiseen.<\/p>\n

<\/p>\n

Osioiden LBA (looginen lohko-osoite) k\u00e4ynnist\u00e4minen<\/strong>: T\u00e4m\u00e4 ilmaisee levyn osion alkupisteen. Se kertoo j\u00e4rjestelm\u00e4lle, mist\u00e4 osio alkaa.<\/p>\n

<\/p>\n

Osion LBA:n p\u00e4\u00e4ttyminen<\/strong>: Kuten aloittava LBA, t\u00e4m\u00e4 osoittaa, mihin osio p\u00e4\u00e4ttyy levyll\u00e4.<\/p>\n

<\/p>\n

Attribuuttibitit<\/strong>: N\u00e4m\u00e4 ovat lippuja, jotka antavat lis\u00e4tietoja osiosta, kuten onko se k\u00e4ynnistett\u00e4viss\u00e4 tai onko sill\u00e4 erityisi\u00e4 ominaisuuksia.<\/p>\n

<\/p>\n

Osion nimi<\/strong>: Kullakin osiolla voi olla ihmisen luettavissa oleva nimi, jolloin meid\u00e4n on helpompi tunnistaa osioiden tarkoitus tai sis\u00e4lt\u00f6. Nimi p\u00e4\u00e4tet\u00e4\u00e4n nollamerkill\u00e4 merkkijonon p\u00e4\u00e4ttymisen merkiksi.<\/p>\n

<\/p>\n

K\u00e4yd\u00e4\u00e4np\u00e4 n\u00e4m\u00e4 kaikki yksityiskohtaisesti l\u00e4pi, jotta ymm\u00e4rr\u00e4t t\u00e4ysin jokaisen rivin merkinn\u00e4n.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Kun levy asetetaan GPT-levyksi, ensimm\u00e4inen luotava osio on EFI-j\u00e4rjestelm\u00e4osio (ESP). T\u00e4m\u00e4 on piilotettu osio, joka ei ole helposti k\u00e4ytt\u00e4jien saatavilla. T\u00e4m\u00e4 osio sijaitsee sektorilla 2048, ja se on alustettu FAT32-muotoon, jotta se olisi yhteensopiva kaikkien j\u00e4rjestelmien (Windows, Linux, MacOS) kanssa.<\/p>\n

<\/p>\n

Yll\u00e4 olevassa kuvakaappauksessa on tavallinen Windows 10 -asennus, jossa Microsoftin varattu osio on luotu yhdess\u00e4 k\u00e4ytt\u00e4j\u00e4n asennuksen aikana m\u00e4\u00e4ritt\u00e4m\u00e4n Basic Data -osion kanssa.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Alla on ote GUID-tietueista taulukosta, joka l\u00f6ytyy Wikipedian GUID Partition Table -sivulta:<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

L\u00e4hde: https:\/\/en.wikipedia.org\/wiki\/GUID_Partition_Table#Partition_type_GUIDs<\/a><\/p>\n

<\/p>\n

GUID-tunnusta ei tietenk\u00e4\u00e4n tallenneta GUIID-lomakkeeseen, kun arvoja tarkastellaan heksan katseluohjelmassa.\u00a0<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

GUID-tunnukset muunnetaan aivan kuten edellisess\u00e4 blogikirjoituksessa, mutta ne ovat my\u00f6s helposti n\u00e4ht\u00e4viss\u00e4, kun niit\u00e4 tarkastellaan HxD:ss\u00e4:<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Voimme vahvistaa osioiden GUID:t komennolla: mountvol.exe<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Kun tied\u00e4mme alku-LBA:n ja loppu-LBA:n, voimme laskea, kuinka suuri osio on. Esimerkiksi EFI-osio:<\/p>\n

<\/p>\n

Alkava LBA: 2048<\/p>\n

<\/p>\n

LBA: 534527<\/p>\n

<\/p>\n

Kokonaispituus: 532479 sektoria x 512 tavua\/sektori = 272629248 tavua eli 260 Mt.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Varmuuskopiointi GPT-osion merkint\u00e4ryhm\u00e4<\/h2>\n

<\/p>\n

Varmuuskopio GPT-osion merkint\u00e4rivi sijaitsee levyn lopussa ja ennen GPT-otsikkoa, eli 33 sektoria ennen levyn loppua (LBA (n - 33), jossa n on levyn viimeinen sektori). Voimme my\u00f6s laskea, miksi se sijaitsee 33 sektoria ennen levyn loppua tai 32 sektoria ennen varmuuskopio-GPT-otsikkoa.<\/p>\n

<\/p>\n

Kukin osiomerkint\u00e4 on 128 tavua, ja merkint\u00e4rakenteessa on yhteens\u00e4 128 merkint\u00e4\u00e4. T\u00e4m\u00e4 tarkoittaa, ett\u00e4 Array:ss\u00e4 on 16 384 sektoria tai 32 sektoria (16384\/512).\u00a0<\/p>\n

<\/p>\n

Backup GPT Header osoittaa Backup GPT Partition Entry Array -osion sijaintiin.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Varmuuskopiointi GPT-osion merkint\u00e4 Array l\u00e4hell\u00e4 levyn loppua<\/p>\n

<\/p>\n

GPT-osion merkint\u00e4m\u00e4\u00e4r\u00e4n korjaaminen<\/h2>\n

<\/p>\n

GPT-osion merkint\u00e4rakenteen korjaaminen on yht\u00e4 suoraviivaista kuin 16 384 tavun varmuuskopion kopioiminen 33 sektorista levyn lopusta ja niiden liitt\u00e4minen LBA-alueille 2-3. Mit\u00e4\u00e4n muutoksia\/muutoksia heksan arvoihin ei tarvita, koska n\u00e4m\u00e4 ovat tarkkoja kopioita.<\/p>\n

<\/p>\n

Levyn loppup\u00e4\u00e4ss\u00e4 sijaitseva GPT-varmuuskopio on sama kuin ensisijainen. Itse asiassa molempien sektoreiden erottaminen ja niiden hashaus osoittaa, ett\u00e4 ne vastaavat t\u00e4ysin toisiaan.\u00a0<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

P\u00e4\u00e4telm\u00e4<\/h2>\n

<\/p>\n

T\u00e4ss\u00e4 kolmannessa osassa olemme tutkineet perusteellisesti GPT-osion merkint\u00e4rakennetta, joka on GPT-kaavion kriittinen osa. Jaottelemalla osiomerkint\u00f6jen kaikki kent\u00e4t GUID-tunnuksista attribuuttibitteihin ja osioiden nimiin olemme n\u00e4hneet, miten GPT tarjoaa vankan kehyksen levydatan j\u00e4rjest\u00e4miseen ja k\u00e4ytt\u00e4miseen. N\u00e4m\u00e4 tiedot ovat v\u00e4ltt\u00e4m\u00e4tt\u00f6mi\u00e4 rikosteknisiss\u00e4 tutkimuksissa, tietojen palautuksessa ja j\u00e4rjestelm\u00e4nhallinnassa, ja ne antavat sinulle taidot, joilla voit navigoida ja k\u00e4sitell\u00e4 GPT-partitioidut levyt tehokkaasti. Pysy kuulolla seuraavassa postauksessamme, jossa perehdymme k\u00e4yt\u00e4nn\u00f6n sovelluksiin ja tapaustutkimuksiin, joissa teoriaa sovelletaan k\u00e4yt\u00e4nt\u00f6\u00f6n.<\/p>\n

T\u00e4m\u00e4 viesti p\u00e4\u00e4tt\u00e4\u00e4 3-osaisen sarjamme GPT-osion rakenteista.<\/strong>
Jos et ole lukenut aiempia viestej\u00e4, aloita Osa 1 - Suojaava MBR<\/strong><\/a>, jossa tarkastelemme, miten perint\u00f6yhteensopivuutta yll\u00e4pidet\u00e4\u00e4n, ja jatkamme seuraavilla aiheilla Osa 2 - GPT-otsikko<\/strong><\/a>, joka m\u00e4\u00e4rittelee levyn asettelun ja varmistaa eheyden.<\/p>\n

Haluatko menn\u00e4 syvemm\u00e4lle? Tilaa uutiskirjeemme, josta saat tulevaa sis\u00e4lt\u00f6\u00e4 osioiden palautuksesta, levytason hashinasta ja CTF-haasteista, jotka perustuvat todellisiin rikosteknisiin skenaarioihin.<\/p>\n

<\/p>\n

<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Tutustu syv\u00e4llisemmin GPT-osion merkint\u00e4rakenteeseen ja sen merkitykseen digitaalisessa rikosteknisess\u00e4 analyysiss\u00e4. T\u00e4ss\u00e4 oppaassa tarkastellaan keskeisi\u00e4 tekniikoita ja n\u00e4kemyksi\u00e4 rikosteknisten tutkimusten tehostamiseksi.<\/p>","protected":false},"author":1,"featured_media":580,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[],"class_list":["post-922","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-forensics"],"acf":[],"yoast_head":"\nNavigating the GPT Partition Entry Array for Forensic Analysis. Part 3. - Elusive Data<\/title>\n<meta name=\"description\" content=\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elusivedata.io\/fi\/3-2\/\" \/>\n<meta property=\"og:locale\" content=\"fi_FI\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\" \/>\n<meta property=\"og:description\" content=\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elusivedata.io\/fi\/3-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Elusive Data\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-22T16:07:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-18T18:04:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"James Eichbaum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Kirjoittanut\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Eichbaum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Arvioitu lukuaika\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minuuttia\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"},\"author\":{\"name\":\"James Eichbaum\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\"},\"headline\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\",\"datePublished\":\"2024-11-22T16:07:40+00:00\",\"dateModified\":\"2025-07-18T18:04:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"},\"wordCount\":919,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"articleSection\":[\"Digital Forensics\"],\"inLanguage\":\"fi\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\",\"name\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3. - Elusive Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"datePublished\":\"2024-11-22T16:07:40+00:00\",\"dateModified\":\"2025-07-18T18:04:35+00:00\",\"description\":\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#breadcrumb\"},\"inLanguage\":\"fi\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fi\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"width\":2560,\"height\":1707,\"caption\":\"Hard disk drive \u2014 digital forensics evidence storage device analysis\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/elusivedata.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"name\":\"ElusiveData\",\"description\":\"Excellence in Digital Forensics Training and Consulting\",\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elusivedata.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fi\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\",\"name\":\"ElusiveData\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fi\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"width\":2560,\"height\":370,\"caption\":\"ElusiveData\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@elusivedata\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\",\"name\":\"James Eichbaum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fi\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"caption\":\"James Eichbaum\"},\"sameAs\":[\"http:\\\/\\\/elusivedata.io\"],\"url\":\"https:\\\/\\\/elusivedata.io\\\/fi\\\/author\\\/eichbaumjamesgmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Navigointi GPT-osion merkint\u00e4rakenteessa rikosteknist\u00e4 analyysia varten. Osa 3. - Ep\u00e4m\u00e4\u00e4r\u00e4iset tiedot","description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elusivedata.io\/fi\/3-2\/","og_locale":"fi_FI","og_type":"article","og_title":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.","og_description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","og_url":"https:\/\/elusivedata.io\/fi\/3-2\/","og_site_name":"Elusive Data","article_published_time":"2024-11-22T16:07:40+00:00","article_modified_time":"2025-07-18T18:04:35+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","type":"image\/jpeg"}],"author":"James Eichbaum","twitter_card":"summary_large_image","twitter_misc":{"Kirjoittanut":"James Eichbaum","Arvioitu lukuaika":"7 minuuttia"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/elusivedata.io\/3-2\/#article","isPartOf":{"@id":"https:\/\/elusivedata.io\/3-2\/"},"author":{"name":"James Eichbaum","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436"},"headline":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.","datePublished":"2024-11-22T16:07:40+00:00","dateModified":"2025-07-18T18:04:35+00:00","mainEntityOfPage":{"@id":"https:\/\/elusivedata.io\/3-2\/"},"wordCount":919,"commentCount":1,"publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"image":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","articleSection":["Digital Forensics"],"inLanguage":"fi","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/elusivedata.io\/3-2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/elusivedata.io\/3-2\/","url":"https:\/\/elusivedata.io\/3-2\/","name":"Navigointi GPT-osion merkint\u00e4rakenteessa rikosteknist\u00e4 analyysia varten. Osa 3. - Ep\u00e4m\u00e4\u00e4r\u00e4iset tiedot","isPartOf":{"@id":"https:\/\/elusivedata.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"image":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","datePublished":"2024-11-22T16:07:40+00:00","dateModified":"2025-07-18T18:04:35+00:00","description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","breadcrumb":{"@id":"https:\/\/elusivedata.io\/3-2\/#breadcrumb"},"inLanguage":"fi","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elusivedata.io\/3-2\/"]}]},{"@type":"ImageObject","inLanguage":"fi","@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","width":2560,"height":1707,"caption":"Hard disk drive \u2014 digital forensics evidence storage device analysis"},{"@type":"BreadcrumbList","@id":"https:\/\/elusivedata.io\/3-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elusivedata.io\/"},{"@type":"ListItem","position":2,"name":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3."}]},{"@type":"WebSite","@id":"https:\/\/elusivedata.io\/#website","url":"https:\/\/elusivedata.io\/","name":"ElusiveData","description":"Huippuosaamista digitaalisen rikostekniikan koulutuksessa ja konsultoinnissa","publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elusivedata.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fi"},{"@type":"Organization","@id":"https:\/\/elusivedata.io\/#organization","name":"ElusiveData","url":"https:\/\/elusivedata.io\/","logo":{"@type":"ImageObject","inLanguage":"fi","@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","width":2560,"height":370,"caption":"ElusiveData"},"image":{"@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@elusivedata"]},{"@type":"Person","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436","name":"James Eichbaum","image":{"@type":"ImageObject","inLanguage":"fi","@id":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","url":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","caption":"James Eichbaum"},"sameAs":["http:\/\/elusivedata.io"],"url":"https:\/\/elusivedata.io\/fi\/author\/eichbaumjamesgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/posts\/922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/comments?post=922"}],"version-history":[{"count":9,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/posts\/922\/revisions"}],"predecessor-version":[{"id":7455,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/posts\/922\/revisions\/7455"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/media\/580"}],"wp:attachment":[{"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/media?parent=922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/categories?post=922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elusivedata.io\/fi\/wp-json\/wp\/v2\/tags?post=922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}