This excerpt from Chapter 5 of File System Forensic Analysis is posted with permission from Addison-Wesley Professional. The last chapter provided an overview of volume analysis and why it’s important ...
To extend a volume, unallocated space must exist, and the unallocated space must be adjacent to the target partition. In addition, the partition style of the target volume must be in NTFS format. The ...