{"id":920,"date":"2024-11-22T16:06:10","date_gmt":"2024-11-22T16:06:10","guid":{"rendered":"https:\/\/elusivedata.io\/?p=920"},"modified":"2025-07-18T18:04:37","modified_gmt":"2025-07-18T18:04:37","slug":"2-2","status":"publish","type":"post","link":"https:\/\/elusivedata.io\/pl\/2-2\/","title":{"rendered":"GPT cz\u0119\u015b\u0107 2. Rola nag\u0142\u00f3wka GPT w integralno\u015bci dysku."},"content":{"rendered":"

Wprowadzenie<\/h2>\n\n\n\n

W pierwszej cz\u0119\u015bci tej serii blog\u00f3w zbadali\u015bmy Ochronny MBR i jego rol\u0119 w zabezpieczaniu kompatybilno\u015bci nowoczesnych dysk\u00f3w z partycjami GPT ze starszymi systemami. Zag\u0142\u0119bili\u015bmy si\u0119 w to, w jaki spos\u00f3b Protective MBR s\u0142u\u017cy jako bariera zapobiegaj\u0105ca b\u0142\u0119dnej interpretacji dysk\u00f3w GPT przez starsze systemy, zapewniaj\u0105c w ten spos\u00f3b, \u017ce ca\u0142y dysk jest oznaczony jako u\u017cywany przez GPT. To fundamentalne zrozumienie stanowi podstaw\u0119 do g\u0142\u0119bszego zanurzenia si\u0119 w sercu samej tablicy partycji GUID (GPT) - nag\u0142\u00f3wku GPT.<\/p>\n\n\n\n

W tej drugiej cz\u0119\u015bci rozpakujemy nag\u0142\u00f3wek GPT, kluczowy sk\u0142adnik schematu GPT, kt\u00f3ry dostarcza istotnych informacji o strukturze dysku. Przeanalizujemy ka\u017cde pole w nag\u0142\u00f3wku GPT, wyja\u015bniaj\u0105c jego znaczenie i spos\u00f3b, w jaki przyczynia si\u0119 do og\u00f3lnej funkcjonalno\u015bci i integralno\u015bci dysku. Pod koniec tego postu b\u0119dziesz mia\u0142 kompleksowe zrozumienie nag\u0142\u00f3wka GPT, co pozwoli ci pewnie analizowa\u0107 i manipulowa\u0107 dyskami z partycjami GPT w dochodzeniach kryminalistycznych lub scenariuszach odzyskiwania danych.<\/p>\n\n\n\n

Przegl\u0105d nag\u0142\u00f3wka GPT<\/h2>\n\n\n\n

Nag\u0142\u00f3wek GPT (GUID Partition Table) jest kluczowym elementem systemu partycjonowania dysku. Dzieli on dysk na oddzielne sekcje, z kt\u00f3rych ka\u017cda mo\u017ce przechowywa\u0107 r\u00f3\u017cne typy danych, takie jak system operacyjny, pliki osobiste, dane aplikacji lub gry. Sekcje te mog\u0105 by\u0107 r\u00f3\u017cnymi dyskami (takimi jak dysk C:, dysk D:, dysk E: itp.).<\/p>\n\n\n\n

Nag\u0142\u00f3wek GPT zawiera kopi\u0119 zapasow\u0105 na ko\u0144cu dysku, podobnie jak posiadanie zapasowego klucza do katalogu biblioteki na wypadek zgubienia lub uszkodzenia g\u0142\u00f3wnego. Gwarantuje to, \u017ce mo\u017cemy znale\u017a\u0107 i uzyska\u0107 dost\u0119p do naszych danych, nawet je\u015bli co\u015b p\u00f3jdzie nie tak.<\/p>\n\n\n\n

Nag\u0142\u00f3wek GPT zapewnia lokalizacj\u0119 kopii zapasowej i lokalizacj\u0119 tablicy wpis\u00f3w tabeli partycji GUID, kt\u00f3ra jest list\u0105 wpis\u00f3w partycji GPT wskazuj\u0105cych, gdzie te sekcje (partycje) znajduj\u0105 si\u0119 na dysku.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Rysunek 1: Uk\u0142ad hipotetycznej instalacji systemu Windows 10 z jednym woluminem (n = ostatni sektor dysku)<\/em><\/p>\n\n\n\n

Nag\u0142\u00f3wek GPT zaczyna si\u0119 od podpisu EFI PART. Pozosta\u0142e warto\u015bci zosta\u0142y przedstawione w poni\u017cszej tabeli:<\/p>\n\n\n\n

Struktura nag\u0142\u00f3wka GPT<\/h2>\n\n\n\n

Nag\u0142\u00f3wek GPT rozpoczyna si\u0119 od podpisu \"EFI PART.\" Pozosta\u0142e warto\u015bci zosta\u0142y przedstawione w poni\u017cszej tabeli:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u0179r\u00f3d\u0142o: https:\/\/uefi.org\/specs\/UEFI\/2.10\/05_GUID_Partition_Table_Format.html<\/a><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Jak dot\u0105d, pierwsze 16 bajt\u00f3w nag\u0142\u00f3wka GPT pozostanie niezmienne na r\u00f3\u017cnych dyskach GPT.<\/p>\n\n\n\n
Nag\u0142\u00f3wek GPT CRC<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Poni\u017cej znajduje si\u0119 przyk\u0142ad obliczania CRC32 dla nag\u0142\u00f3wka GPT:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Do obliczenia CRC izolowanych bajt\u00f3w mo\u017cna u\u017cy\u0107 skryptu Python:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Skrypt Pythona mo\u017cna znale\u017a\u0107 pod adresem: https:\/\/github.com\/eichbaumj\/Python<\/a><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Skrypt Pythona pobierze wynikow\u0105 warto\u015b\u0107 CRC32 i przekonwertuje j\u0105 na format wymagany dla nag\u0142\u00f3wka GPT. Obliczona warto\u015b\u0107 w tym przypadku wynosi 0x1B2C37BC. Ale aby zapisa\u0107 j\u0105 w polu w nag\u0142\u00f3wku GPT, warto\u015b\u0107 jest odczytywana w formacie little endian: 0xBC372C1B. <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Identyfikator GUID dysku<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Poni\u017cszy zrzut ekranu pokazuje identyfikator GUID pod\u015bwietlony w nag\u0142\u00f3wku GPT:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Identyfikator GUID to 16-bajtowa warto\u015b\u0107 szesnastkowa, ale je\u015bli my\u015blisz, \u017ce mo\u017cesz po prostu skopiowa\u0107 warto\u015bci i oddzieli\u0107 je odpowiednio my\u015blnikami i nawiasami klamrowymi wok\u00f3\u0142 nich, to si\u0119 mylisz. Otrzyma\u0142by\u015b nieprawid\u0142ow\u0105 warto\u015b\u0107.<\/p>\n\n\n\n
Mo\u017cesz zobaczy\u0107, \u017ce HxD zapewnia konwersj\u0119 GUID w Inspektorze danych po prawej stronie. Ale jak to si\u0119 dzieje? W jaki spos\u00f3b:
55 BA 55 51 2B D8 59 41 BC 1F C4 17 80 0F D7 63<\/p>\n\n\n\n
Sta\u0107 si\u0119:<\/p>\n\n\n\n
{5155BA55-D82B-4159-BC1F-C417800FD763}<\/p>\n\n\n\n
Format GUID<\/em><\/h4>\n\n\n\n
XX XX XX | XX XX | XX XX | XX XX | XX XX XX XX XX<\/p>\n\n\n\n
55 BA 55 51 | 2B D8 | 59 41 | BC 1F | C4 17 80 0F D7 63<\/p>\n\n\n\n
Pierwszy zestaw czterech bajt\u00f3w jest konwertowany do postaci hex little-endian: 51 55 BA 55<\/p>\n\n\n\n
Drugi zestaw 2 bajt\u00f3w jest konwertowany do formatu little-endian hex: D8 2B<\/p>\n\n\n\n
Trzeci zestaw 2 bajt\u00f3w jest konwertowany na szesnastkowy little-endian: 59 41<\/p>\n\n\n\n
Pozosta\u0142e dwa zestawy warto\u015bci szesnastkowych pozostaj\u0105 bez zmian, big-endian: BC 1F | C4 17 80 0F D7 63<\/p>\n\n\n\n
Po zako\u0144czeniu wszystkich konwersji mo\u017cemy je wszystkie po\u0142\u0105czy\u0107, umieszczaj\u0105c my\u015blniki tam, gdzie s\u0105 potrzebne i zamykaj\u0105c je w nawiasach klamrowych:<\/p>\n\n\n\n
{5155BA55-D82B-4159-BC1F-C417800FD763}<\/p>\n\n\n\n
Mo\u017cemy potwierdzi\u0107, \u017ce jest to prawid\u0142owe kodowanie GUID, uruchamiaj\u0105c diskpart z wiersza polece\u0144 i sprawdzaj\u0105c unikalny identyfikator dysku:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Suma kontrolna CRC tablicy partycji GPT<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Mo\u017cemy u\u017cy\u0107 tego samego skryptu Pythona, ale zast\u0105pi\u0107 warto\u015bci szesnastkowe warto\u015bciami znalezionymi w tablicy wpis\u00f3w partycji. <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Widzimy, \u017ce warto\u015b\u0107 odpowiada temu, co znajduje si\u0119 w nag\u0142\u00f3wku GPT.<\/p>\n\n\n\n
Naprawianie nag\u0142\u00f3wka GPT<\/h2>\n\n\n\n
Ok, skoro wiemy ju\u017c, jak zbudowany jest nag\u0142\u00f3wek GPT i \u017ce w ostatnim sektorze dysku znajduje si\u0119 kopia zapasowa, jak naprawi\u0107 nag\u0142\u00f3wek GPT w przypadku jego uszkodzenia lub wymazania?<\/p>\n\n\n\n
Aby naprawi\u0107 nag\u0142\u00f3wek GPT, skopiuj ostatnie 512 bajt\u00f3w z ko\u0144ca dysku i wklej je do LBA 1 (sektor #2). Nale\u017cy pami\u0119ta\u0107, \u017ce konieczne jest wprowadzenie kilku modyfikacji.<\/p>\n\n\n\n
Poni\u017cej znajduje si\u0119 przyk\u0142ad tego, jak wygl\u0105da nag\u0142\u00f3wek kopii zapasowej GPT na ko\u0144cu dysku:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Widzimy, \u017ce niekt\u00f3re warto\u015bci pozostaj\u0105 sta\u0142e w por\u00f3wnaniu do oryginalnego nag\u0142\u00f3wka GPT. Te sta\u0142e s\u0105 zaznaczone na czerwono poni\u017cej:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Istniej\u0105 cztery warto\u015bci, kt\u00f3re nale\u017cy zmieni\u0107.<\/p>\n\n\n\n
Pierwsz\u0105 z nich jest CRC nag\u0142\u00f3wka GPT, do kt\u00f3rego jeszcze wr\u00f3cimy. Na razie warto\u015bci te mo\u017cna wyzerowa\u0107, poniewa\u017c b\u0119dziemy musieli u\u017cy\u0107 CRC obliczonego po zmodyfikowaniu innych warto\u015bci, aby ponownie uzyska\u0107 prawid\u0142ow\u0105 warto\u015b\u0107.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Nast\u0119pna jest warto\u015b\u0107 MyLBA znajduj\u0105ca si\u0119 na offsecie 24 dla 4 bajt\u00f3w. Warto\u015b\u0107 ta wskazuje na lokalizacj\u0119 nag\u0142\u00f3wka GPT (gdzie aktualnie si\u0119 znajduje), a jej aktualna pozycja to LBA 1 lub 0x01000000000000000. <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
8-bajtowa warto\u015b\u0107 przy przesuni\u0119ciu 32 to warto\u015b\u0107, kt\u00f3ra wskazuje nam lokalizacj\u0119 zapasowego nag\u0142\u00f3wka GPT. Kopia zapasowa wskazuje obecnie na orygina\u0142, ale musimy zmieni\u0107 t\u0119 warto\u015b\u0107, aby reprezentowa\u0142a ostatni sektor dysku. Sta\u0142o si\u0119 tak z warto\u015bciami szesnastkowymi, kt\u00f3re w\u0142a\u015bnie zmienili\u015bmy w poprzednim kroku. W tym przyk\u0142adzie warto\u015b\u0107 nale\u017ca\u0142oby zmieni\u0107 na 0xAFD23B7700000000.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
8-bajtowa warto\u015b\u0107 znajduj\u0105ca si\u0119 przy przesuni\u0119ciu 72 musi odzwierciedla\u0107 lokalizacj\u0119 i pocz\u0105tek tablicy wpis\u00f3w partycji GPT. Obecnie nag\u0142\u00f3wek kopii zapasowej GPT wskazuje na kopi\u0119 zapasow\u0105 tej tablicy. Rzeczywista tablica partycji GPT powinna znajdowa\u0107 si\u0119 w LBA 2. Warto\u015b\u0107 ta musi zosta\u0107 zmieniona na 0x0200000000000000.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Po zmianie tych trzech warto\u015bci nadszed\u0142 czas na obliczenie warto\u015bci CRC32. <\/p>\n\n\n\n
Wynikowa suma kontrolna to:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Teraz mo\u017cemy zast\u0105pi\u0107 warto\u015bci 0x00000000 przy przesuni\u0119ciu 16 warto\u015bci\u0105 0xBC372C1B:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
HxD ma wbudowany kalkulator sumy kontrolnej CRC32 w Analiza -> Sumy kontrolne. Warto\u015b\u0107 wynikowa musi by\u0107 dodana jako warto\u015b\u0107 little-endian.<\/p>\n\n\n\n
Dla ciekawo\u015bci, gdyby\u015bmy mieli wyizolowa\u0107 te 512 bajt\u00f3w dla orygina\u0142u i kopii zapasowej, kt\u00f3r\u0105 przywr\u00f3cili\u015bmy, warto\u015bci hash rzeczywi\u015bcie pasuj\u0105, wskazuj\u0105c, \u017ce pomy\u015blnie odtworzyli\u015bmy oryginalny nag\u0142\u00f3wek GPT przy u\u017cyciu kopii zapasowej.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Wnioski<\/h2>\n\n\n\n
Zrozumienie zawi\u0142o\u015bci nag\u0142\u00f3wka GPT jest niezb\u0119dne dla ka\u017cdego, kto zajmuje si\u0119 kryminalistyk\u0105 cyfrow\u0105, odzyskiwaniem danych lub administracj\u0105 systemu. Nag\u0142\u00f3wek GPT nie tylko definiuje uk\u0142ad i struktur\u0119 dysku, ale tak\u017ce zapewnia integralno\u015b\u0107 danych poprzez mechanizmy takie jak sumy kontrolne CRC32 i nag\u0142\u00f3wki kopii zapasowych. Opanowuj\u0105c szczeg\u00f3\u0142y nag\u0142\u00f3wka GPT, jeste\u015b lepiej przygotowany do rozwi\u0105zywania i naprawiania problem\u00f3w z dyskami, zapewniaj\u0105c niezawodno\u015b\u0107 i dost\u0119pno\u015b\u0107 krytycznych danych.<\/p>\n\n\n\n
Kontynuuj\u0105c t\u0119 seri\u0119, skupimy si\u0119 na tablicy wpis\u00f3w tabeli partycji GPT. Zbadamy, w jaki spos\u00f3b wpisy partycji s\u0105 ustrukturyzowane i jak wsp\u00f3\u0142pracuj\u0105 z nag\u0142\u00f3wkiem GPT w celu utrzymania organizacji i integralno\u015bci partycji dyskowych. B\u0105d\u017a na bie\u017c\u0105co z kompleksowym przewodnikiem na temat analizowania i naprawiania tablicy wpis\u00f3w tabeli partycji GPT, co jeszcze bardziej wzmocni twoj\u0105 wiedz\u0119, aby pewnie obs\u0142ugiwa\u0107 dyski z partycjami GPT.<\/p>\n\n\n\n
Przegapi\u0142e\u015b cz\u0119\u015b\u0107 1?<\/strong><\/p>\n\n\n\n
Zacznij od pocz\u0105tku: Zrozumienie ochronnego MBR na dyskach z partycjami GPT (cz\u0119\u015b\u0107 1)<\/a> - gdzie opisujemy, w jaki spos\u00f3b GPT zapewnia wsteczn\u0105 kompatybilno\u015b\u0107 ze starszymi systemami.<\/p>\n\n\n\n
Gotowy na kolejny krok?<\/strong><\/p>\n\n\n\n
Kontynuowa\u0107 Cz\u0119\u015b\u0107 3: Poruszanie si\u0119 po tablicy wpis\u00f3w partycji GPT<\/a> - gdzie badamy struktur\u0119 wpis\u00f3w partycji i spos\u00f3b, w jaki uzupe\u0142niaj\u0105 one nag\u0142\u00f3wek GPT.<\/p>","protected":false},"excerpt":{"rendered":"
Poznaj istotn\u0105 rol\u0119 nag\u0142\u00f3wka GPT w utrzymaniu integralno\u015bci dysku. Ten artyku\u0142 zapewnia wgl\u0105d w jego struktur\u0119, cel i znaczenie w dochodzeniach kryminalistycznych.<\/p>","protected":false},"author":1,"featured_media":579,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[],"class_list":["post-920","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-forensics"],"acf":[],"yoast_head":"\nGPT part 2. The Role of the GPT Header in Disk Integrity. - Elusive Data<\/title>\n<meta name=\"description\" content=\"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elusivedata.io\/pl\/2-2\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GPT part 2. The Role of the GPT Header in Disk Integrity.\" \/>\n<meta property=\"og:description\" content=\"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elusivedata.io\/pl\/2-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Elusive Data\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-22T16:06:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-18T18:04:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1920\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"James Eichbaum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Eichbaum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/\"},\"author\":{\"name\":\"James Eichbaum\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\"},\"headline\":\"GPT part 2. The Role of the GPT Header in Disk Integrity.\",\"datePublished\":\"2024-11-22T16:06:10+00:00\",\"dateModified\":\"2025-07-18T18:04:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/\"},\"wordCount\":1382,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD2-scaled.jpg\",\"articleSection\":[\"Digital Forensics\"],\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/\",\"name\":\"GPT part 2. The Role of the GPT Header in Disk Integrity. - Elusive Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD2-scaled.jpg\",\"datePublished\":\"2024-11-22T16:06:10+00:00\",\"dateModified\":\"2025-07-18T18:04:37+00:00\",\"description\":\"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD2-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/HDD2-scaled.jpg\",\"width\":2560,\"height\":1920,\"caption\":\"Hard disk drive \u2014 digital forensics evidence storage device analysis\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/2-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/elusivedata.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GPT part 2. The Role of the GPT Header in Disk Integrity.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"name\":\"ElusiveData\",\"description\":\"Excellence in Digital Forensics Training and Consulting\",\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elusivedata.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\",\"name\":\"ElusiveData\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"width\":2560,\"height\":370,\"caption\":\"ElusiveData\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@elusivedata\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\",\"name\":\"James Eichbaum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"caption\":\"James Eichbaum\"},\"sameAs\":[\"http:\\\/\\\/elusivedata.io\"],\"url\":\"https:\\\/\\\/elusivedata.io\\\/pl\\\/author\\\/eichbaumjamesgmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GPT cz\u0119\u015b\u0107 2. Rola nag\u0142\u00f3wka GPT w integralno\u015bci dysku. - Nieuchwytne dane","description":"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elusivedata.io\/pl\/2-2\/","og_locale":"pl_PL","og_type":"article","og_title":"GPT part 2. The Role of the GPT Header in Disk Integrity.","og_description":"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.","og_url":"https:\/\/elusivedata.io\/pl\/2-2\/","og_site_name":"Elusive Data","article_published_time":"2024-11-22T16:06:10+00:00","article_modified_time":"2025-07-18T18:04:37+00:00","og_image":[{"width":2560,"height":1920,"url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg","type":"image\/jpeg"}],"author":"James Eichbaum","twitter_card":"summary_large_image","twitter_misc":{"Napisane przez":"James Eichbaum","Szacowany czas czytania":"12 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/elusivedata.io\/2-2\/#article","isPartOf":{"@id":"https:\/\/elusivedata.io\/2-2\/"},"author":{"name":"James Eichbaum","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436"},"headline":"GPT part 2. The Role of the GPT Header in Disk Integrity.","datePublished":"2024-11-22T16:06:10+00:00","dateModified":"2025-07-18T18:04:37+00:00","mainEntityOfPage":{"@id":"https:\/\/elusivedata.io\/2-2\/"},"wordCount":1382,"commentCount":2,"publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"image":{"@id":"https:\/\/elusivedata.io\/2-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg","articleSection":["Digital Forensics"],"inLanguage":"pl-PL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/elusivedata.io\/2-2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/elusivedata.io\/2-2\/","url":"https:\/\/elusivedata.io\/2-2\/","name":"GPT cz\u0119\u015b\u0107 2. Rola nag\u0142\u00f3wka GPT w integralno\u015bci dysku. - Nieuchwytne dane","isPartOf":{"@id":"https:\/\/elusivedata.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/elusivedata.io\/2-2\/#primaryimage"},"image":{"@id":"https:\/\/elusivedata.io\/2-2\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg","datePublished":"2024-11-22T16:06:10+00:00","dateModified":"2025-07-18T18:04:37+00:00","description":"Explore the role of the GPT Header in maintaining disk integrity and enabling forensic analysis. Part 2 of our series on GUID Partition Table structures for digital investigators.","breadcrumb":{"@id":"https:\/\/elusivedata.io\/2-2\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elusivedata.io\/2-2\/"]}]},{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/elusivedata.io\/2-2\/#primaryimage","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/HDD2-scaled.jpg","width":2560,"height":1920,"caption":"Hard disk drive \u2014 digital forensics evidence storage device analysis"},{"@type":"BreadcrumbList","@id":"https:\/\/elusivedata.io\/2-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elusivedata.io\/"},{"@type":"ListItem","position":2,"name":"GPT part 2. The Role of the GPT Header in Disk Integrity."}]},{"@type":"WebSite","@id":"https:\/\/elusivedata.io\/#website","url":"https:\/\/elusivedata.io\/","name":"ElusiveData","description":"Doskona\u0142o\u015b\u0107 w zakresie szkole\u0144 i doradztwa w dziedzinie informatyki \u015bledczej","publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elusivedata.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pl-PL"},{"@type":"Organization","@id":"https:\/\/elusivedata.io\/#organization","name":"ElusiveData","url":"https:\/\/elusivedata.io\/","logo":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","width":2560,"height":370,"caption":"ElusiveData"},"image":{"@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@elusivedata"]},{"@type":"Person","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436","name":"James Eichbaum","image":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","url":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","caption":"James Eichbaum"},"sameAs":["http:\/\/elusivedata.io"],"url":"https:\/\/elusivedata.io\/pl\/author\/eichbaumjamesgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/posts\/920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/comments?post=920"}],"version-history":[{"count":11,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/posts\/920\/revisions"}],"predecessor-version":[{"id":7452,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/posts\/920\/revisions\/7452"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/media\/579"}],"wp:attachment":[{"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/media?parent=920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/categories?post=920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elusivedata.io\/pl\/wp-json\/wp\/v2\/tags?post=920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}