{"id":922,"date":"2024-11-22T16:07:40","date_gmt":"2024-11-22T16:07:40","guid":{"rendered":"https:\/\/elusivedata.io\/?p=922"},"modified":"2025-07-18T18:04:35","modified_gmt":"2025-07-18T18:04:35","slug":"3-2","status":"publish","type":"post","link":"https:\/\/elusivedata.io\/fr\/3-2\/","title":{"rendered":"Navigation dans le tableau d'entr\u00e9e des partitions GPT pour l'analyse forensique. Partie 3."},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>\n

Troisi\u00e8me partie<\/h1>\n

<\/p>\n

Introduction<\/h2>\n

<\/p>\n

Dans nos articles pr\u00e9c\u00e9dents, nous avons jet\u00e9 les bases de la compr\u00e9hension de la table de partition GUID (GPT) en examinant le MBR de protection et l'en-t\u00eate GPT. \u00c0 pr\u00e9sent, dans la troisi\u00e8me partie, nous nous concentrons sur le tableau d'entr\u00e9e des partitions GPT. Ce composant crucial du sch\u00e9ma GPT fournit une carte d\u00e9taill\u00e9e de toutes les partitions du disque, chaque entr\u00e9e contenant des informations vitales sur une partition sp\u00e9cifique. En comprenant la structure et la fonction de la matrice d'entr\u00e9es de partitions GPT, vous obtiendrez une vue d'ensemble de la mani\u00e8re dont GPT g\u00e8re les partitions, ce qui vous permettra d'effectuer des analyses, des d\u00e9pannages et des r\u00e9cup\u00e9rations de donn\u00e9es plus efficaces.<\/p>\n

<\/p>\n

Tableau d'entr\u00e9es de partition GPT (GUID Partition Table)<\/h2>\n

<\/p>\n

Le tableau d'entr\u00e9es de la table de partition GUID (GPT) est un \u00e9l\u00e9ment essentiel du syst\u00e8me de partitionnement GPT, qui est utilis\u00e9 pour d\u00e9finir et g\u00e9rer les partitions d'un disque dur. Il s'agit d'une liste d\u00e9taill\u00e9e qui enregistre les sp\u00e9cificit\u00e9s de chaque partition sur le disque, comme le catalogue d'une biblioth\u00e8que qui r\u00e9pertorie les d\u00e9tails de chaque livre.<\/p>\n

<\/p>\n

Composants cl\u00e9s du tableau d'entr\u00e9e GPT :<\/h3>\n

<\/p>\n

GUID de la partition<\/strong>: Chaque partition poss\u00e8de un identifiant unique, connu sous le nom de GUID de partition, qui garantit que chaque partition peut \u00eatre identifi\u00e9e de mani\u00e8re unique, m\u00eame sur des syst\u00e8mes diff\u00e9rents.<\/p>\n

<\/p>\n

Identifiant unique<\/strong>: Il s'agit d'un autre identifiant unique propre \u00e0 chaque partition, qui fournit une couche suppl\u00e9mentaire d'identification unique.<\/p>\n

<\/p>\n

D\u00e9marrage du LBA (Logical Block Addressing) de la partition<\/strong>: Indique le point de d\u00e9part de la partition sur le disque. Il indique au syst\u00e8me o\u00f9 commence la partition.<\/p>\n

<\/p>\n

LBA de fin de partition<\/strong>: Comme le LBA de d\u00e9part, il indique l'endroit o\u00f9 la partition se termine sur le disque.<\/p>\n

<\/p>\n

Bits d'attributs<\/strong>: Il s'agit d'indicateurs qui fournissent des informations suppl\u00e9mentaires sur la partition, par exemple si elle est amor\u00e7able ou si elle poss\u00e8de des attributs sp\u00e9ciaux.<\/p>\n

<\/p>\n

Nom de la partition<\/strong>: Chaque partition peut avoir un nom lisible par l'homme, ce qui facilite l'identification de l'objet ou du contenu de la partition. Ce nom est termin\u00e9 par un caract\u00e8re nul pour marquer la fin de la cha\u00eene.<\/p>\n

<\/p>\n

Nous allons les d\u00e9tailler afin que vous compreniez bien chaque entr\u00e9e du tableau.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Lorsque le disque est configur\u00e9 comme un disque GPT, la premi\u00e8re partition cr\u00e9\u00e9e est la partition syst\u00e8me EFI (ESP). Il s'agit d'une partition cach\u00e9e, difficilement accessible aux utilisateurs. Cette partition se trouve dans le secteur 2048 et est format\u00e9e en FAT32 pour \u00eatre compatible avec tous les syst\u00e8mes (Windows, Linux, MacOS).<\/p>\n

<\/p>\n

La capture d'\u00e9cran ci-dessus montre une installation standard de Windows 10 o\u00f9 la partition r\u00e9serv\u00e9e Microsoft a \u00e9t\u00e9 cr\u00e9\u00e9e avec une partition de donn\u00e9es de base sp\u00e9cifi\u00e9e par l'utilisateur lors de l'installation.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Vous trouverez ci-dessous un extrait des GUID d'un tableau trouv\u00e9 sur la page Wikipedia GUID Partition Table (tableau de partition des GUID) :<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Source : https:\/\/en.wikipedia.org\/wiki\/GUID_Partition_Table#Partition_type_GUIDs<\/a><\/p>\n

<\/p>\n

Bien entendu, le GUID ne sera pas stock\u00e9 dans le formulaire GUIID lors de l'affichage des valeurs dans le visualiseur hexagonal.\u00a0<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Les GUID sont convertis comme nous l'avons fait dans l'article de blog pr\u00e9c\u00e9dent, mais ils sont \u00e9galement facilement visibles lorsque vous les visualisez dans HxD :<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Nous pouvons confirmer les GUID des partitions du volume avec la commande : mountvol.exe<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

En connaissant le LBA de d\u00e9part et le LBA d'arriv\u00e9e, nous pouvons calculer la taille de la partition. Par exemple, la partition EFI :<\/p>\n

<\/p>\n

LBA de d\u00e9part : 2048<\/p>\n

<\/p>\n

LBA de fin : 534527<\/p>\n

<\/p>\n

Longueur totale : 532479 secteurs x 512 octets\/secteur = 272629248 octets, soit 260 Mo.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Le tableau d'entr\u00e9es de partition GPT de sauvegarde<\/h2>\n

<\/p>\n

Le tableau d'entr\u00e9e de la partition GPT de sauvegarde est situ\u00e9 \u00e0 la fin du disque et avant l'en-t\u00eate GPT, plus pr\u00e9cis\u00e9ment 33 secteurs avant la fin du disque (LBA (n - 33) o\u00f9 n est le dernier secteur du disque). Nous pouvons \u00e9galement calculer pourquoi il se trouve 33 secteurs avant la fin du disque, ou 32 secteurs avant l'en-t\u00eate GPT de sauvegarde.<\/p>\n

<\/p>\n

Chaque entr\u00e9e de partition a une taille de 128 octets et il y a 128 entr\u00e9es au total dans le tableau d'entr\u00e9es. Cela signifie qu'il y a 16 384 secteurs dans le tableau ou 32 secteurs (16384\/512).\u00a0<\/p>\n

<\/p>\n

L'en-t\u00eate GPT de sauvegarde pointe vers l'emplacement du tableau d'entr\u00e9e de partition GPT de sauvegarde.<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Sauvegarde d'un tableau d'entr\u00e9e de partition GPT proche de la fin du disque<\/p>\n

<\/p>\n

R\u00e9paration d'un tableau d'entr\u00e9es de partition GPT<\/h2>\n

<\/p>\n

Pour r\u00e9parer le tableau d'entr\u00e9es de partition GPT, il suffit de copier la sauvegarde de 16 384 octets trouv\u00e9e dans 33 secteurs de la fin du disque et de la coller dans les LBA 2 \u00e0 3. Il n'est pas n\u00e9cessaire d'alt\u00e9rer\/modifier les valeurs hexagonales car il s'agit de copies exactes.<\/p>\n

<\/p>\n

Le GPT de sauvegarde situ\u00e9 vers la fin du disque est identique au primaire. En fait, le d\u00e9coupage des secteurs pour chacun d'eux et leur hachage montrent qu'ils correspondent exactement.\u00a0<\/p>\n

<\/p>\n

\"\"<\/figure>\n

<\/p>\n

Conclusion<\/h2>\n

<\/p>\n

Dans ce troisi\u00e8me \u00e9pisode, nous avons examin\u00e9 en d\u00e9tail le tableau d'entr\u00e9es de partition GPT, un composant essentiel du sch\u00e9ma GPT. En d\u00e9composant chaque champ des entr\u00e9es de partition, des GUID aux bits d'attribut et aux noms de partition, nous avons vu comment GPT fournit un cadre solide pour organiser et acc\u00e9der aux donn\u00e9es du disque. Ces connaissances sont essentielles pour les enqu\u00eates m\u00e9dico-l\u00e9gales, la r\u00e9cup\u00e9ration des donn\u00e9es et l'administration des syst\u00e8mes, car elles vous permettent de naviguer et de manipuler efficacement les disques partitionn\u00e9s GPT. Restez \u00e0 l'\u00e9coute pour notre prochain article, dans lequel nous nous pencherons sur des applications pratiques et des \u00e9tudes de cas, afin de mettre la th\u00e9orie en pratique.<\/p>\n

Cet article conclut notre s\u00e9rie de trois articles sur les structures de partition GPT.<\/strong>
Si vous avez manqu\u00e9 les articles pr\u00e9c\u00e9dents, commencez par Partie 1 - Le MBR de protection<\/strong><\/a>o\u00f9 nous examinons la mani\u00e8re dont la compatibilit\u00e9 avec l'h\u00e9ritage est maintenue, et nous poursuivons avec Partie 2 - L'en-t\u00eate GPT<\/strong><\/a>qui d\u00e9finit l'agencement du disque et en garantit l'int\u00e9grit\u00e9.<\/p>\n

Vous voulez aller plus loin ? Abonnez-vous \u00e0 notre lettre d'information pour obtenir des informations sur la r\u00e9cup\u00e9ration des partitions, le hachage au niveau du disque et les d\u00e9fis CTF bas\u00e9s sur des sc\u00e9narios r\u00e9els de criminalistique.<\/p>\n

<\/p>\n

<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Ce guide permet de mieux comprendre le tableau d'entr\u00e9e de partition GPT et son importance dans l'analyse criminelle num\u00e9rique. Ce guide explore les techniques cl\u00e9s et les id\u00e9es pour am\u00e9liorer vos enqu\u00eates criminalistiques.<\/p>","protected":false},"author":1,"featured_media":580,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[],"class_list":["post-922","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-forensics"],"acf":[],"yoast_head":"\nNavigating the GPT Partition Entry Array for Forensic Analysis. Part 3. - Elusive Data<\/title>\n<meta name=\"description\" content=\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elusivedata.io\/fr\/3-2\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\" \/>\n<meta property=\"og:description\" content=\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elusivedata.io\/fr\/3-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Elusive Data\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-22T16:07:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-18T18:04:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"James Eichbaum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Eichbaum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"},\"author\":{\"name\":\"James Eichbaum\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\"},\"headline\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\",\"datePublished\":\"2024-11-22T16:07:40+00:00\",\"dateModified\":\"2025-07-18T18:04:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"},\"wordCount\":919,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"articleSection\":[\"Digital Forensics\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\",\"name\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3. - Elusive Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"datePublished\":\"2024-11-22T16:07:40+00:00\",\"dateModified\":\"2025-07-18T18:04:35+00:00\",\"description\":\"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD3-1-scaled.jpg\",\"width\":2560,\"height\":1707,\"caption\":\"Hard disk drive \u2014 digital forensics evidence storage device analysis\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/3-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/elusivedata.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"name\":\"ElusiveData\",\"description\":\"Excellence in Digital Forensics Training and Consulting\",\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elusivedata.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\",\"name\":\"ElusiveData\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"width\":2560,\"height\":370,\"caption\":\"ElusiveData\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@elusivedata\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\",\"name\":\"James Eichbaum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"caption\":\"James Eichbaum\"},\"sameAs\":[\"http:\\\/\\\/elusivedata.io\"],\"url\":\"https:\\\/\\\/elusivedata.io\\\/fr\\\/author\\\/eichbaumjamesgmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Navigation dans le tableau d'entr\u00e9e des partitions GPT pour l'analyse forensique. Partie 3. - Donn\u00e9es insaisissables","description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elusivedata.io\/fr\/3-2\/","og_locale":"fr_FR","og_type":"article","og_title":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.","og_description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","og_url":"https:\/\/elusivedata.io\/fr\/3-2\/","og_site_name":"Elusive Data","article_published_time":"2024-11-22T16:07:40+00:00","article_modified_time":"2025-07-18T18:04:35+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","type":"image\/jpeg"}],"author":"James Eichbaum","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"James Eichbaum","Dur\u00e9e de lecture estim\u00e9e":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/elusivedata.io\/3-2\/#article","isPartOf":{"@id":"https:\/\/elusivedata.io\/3-2\/"},"author":{"name":"James Eichbaum","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436"},"headline":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.","datePublished":"2024-11-22T16:07:40+00:00","dateModified":"2025-07-18T18:04:35+00:00","mainEntityOfPage":{"@id":"https:\/\/elusivedata.io\/3-2\/"},"wordCount":919,"commentCount":1,"publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"image":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","articleSection":["Digital Forensics"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/elusivedata.io\/3-2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/elusivedata.io\/3-2\/","url":"https:\/\/elusivedata.io\/3-2\/","name":"Navigation dans le tableau d'entr\u00e9e des partitions GPT pour l'analyse forensique. Partie 3. - Donn\u00e9es insaisissables","isPartOf":{"@id":"https:\/\/elusivedata.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"image":{"@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","datePublished":"2024-11-22T16:07:40+00:00","dateModified":"2025-07-18T18:04:35+00:00","description":"Learn how to navigate the GPT Partition Entry Array during forensic disk analysis. Understanding partition structures helps investigators locate and recover disk-level evidence.","breadcrumb":{"@id":"https:\/\/elusivedata.io\/3-2\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elusivedata.io\/3-2\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/elusivedata.io\/3-2\/#primaryimage","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD3-1-scaled.jpg","width":2560,"height":1707,"caption":"Hard disk drive \u2014 digital forensics evidence storage device analysis"},{"@type":"BreadcrumbList","@id":"https:\/\/elusivedata.io\/3-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elusivedata.io\/"},{"@type":"ListItem","position":2,"name":"Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3."}]},{"@type":"WebSite","@id":"https:\/\/elusivedata.io\/#website","url":"https:\/\/elusivedata.io\/","name":"Donn\u00e9es insaisissables","description":"L'excellence en mati\u00e8re de formation et de conseil en criminalistique num\u00e9rique","publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elusivedata.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/elusivedata.io\/#organization","name":"Donn\u00e9es insaisissables","url":"https:\/\/elusivedata.io\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","width":2560,"height":370,"caption":"ElusiveData"},"image":{"@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@elusivedata"]},{"@type":"Person","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436","name":"James Eichbaum","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","url":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","caption":"James Eichbaum"},"sameAs":["http:\/\/elusivedata.io"],"url":"https:\/\/elusivedata.io\/fr\/author\/eichbaumjamesgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/posts\/922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/comments?post=922"}],"version-history":[{"count":9,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/posts\/922\/revisions"}],"predecessor-version":[{"id":7455,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/posts\/922\/revisions\/7455"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/media\/580"}],"wp:attachment":[{"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/media?parent=922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/categories?post=922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elusivedata.io\/fr\/wp-json\/wp\/v2\/tags?post=922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}