# Lab 2: Understanding Hard Disks and File Systems
<!-- th -->
!th[c](lab2.png)

1. `/etc/network/interfaces`
2. `istat -f ntfs "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" 1`
3. `4 KB`
4. `fls -m 63 "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" > body.txt`
5. `25 50 44 46`