# Lab 2: Understanding Hard Disks and File Systems
<!-- th -->
!th[c](lab2.png)

1. /etc/network/interfaces
2. istat -f ntfs "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" 1
3. 4 KB
4. fls -m 63 "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" > body.txt
5. 25 50 44 46