# Partition and Volume Analysis

> Master partition tables and volume analysis. Learn to analyze MBR/GPT structures, uncover hidden partitions, and map complex disk layouts.

Canonical: https://codelivly.com/rooms/partition-and-volume-analysis
Last updated: 2026-09-12

| | |
|---|---|
| Level | Intermediate |
| Category | Forensics |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 100 |

This module explores the critical structures that divide physical disks into logical volumes. You will learn to analyze Master Boot Record (MBR) and GUID Partition Table (GPT) structures, identify hidden or deleted partitions, detect encrypted volumes (like BitLocker or LUKS), and map complex volume configurations (LVM, RAID). From a cybersecurity perspective, understanding partition and volume analysis is essential for uncovering data concealed outside standard file systems, reconstructing damaged disk layouts, and identifying anti-forensic techniques used to hide malicious payloads.

## Lessons

1. What Is Partition Analysis and Why Does It Matter (30 min)
2. MBR vs GPT Partition Schemes (30 min)
3. Identifying Hidden & Deleted Partitions (30 min)
4. Guided Lab: Analyzing Partition Tables on a Disk Image (30 min)

## Related

- [Learning path: Disk and File System Forensics](https://codelivly.com/learning-paths/disk-and-file-system-forensics)
- [All rooms](https://codelivly.com/rooms)