Jared Atkinson on Twitter: "NTFS Volume Boot Record Poster (first 512 bytes of the logical volume) @corkami @sansforensics http://t.co/8addG5kVRW" / Twitter
![SANS Digital Forensics and Incident Response Blog | Windows MBR and Advanced Format Drives (e512) | SANS Institute SANS Digital Forensics and Incident Response Blog | Windows MBR and Advanced Format Drives (e512) | SANS Institute](https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/blt4c1198c6c8a5bec9/5e5058701ec0810daab500c4/008-NTFS-Formatted-Partition-500-GB-Volume.jpg)
SANS Digital Forensics and Incident Response Blog | Windows MBR and Advanced Format Drives (e512) | SANS Institute
![SANS Digital Forensics and Incident Response Blog | Windows MBR and Advanced Format Drives (e512) | SANS Institute SANS Digital Forensics and Incident Response Blog | Windows MBR and Advanced Format Drives (e512) | SANS Institute](https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/blt6461086866a1b053/5e50586f09113f0d3a850668/006-exFAT-Formatted-Partition-1-GB-Volume1.jpg)