Using FTK Imager, open the Lab$7-2$FAT$32\mathrm{.}001$ disk image, the disk image assigned for this lab. Inside FTK Imager, use File menu $$ Add Evidence Item... then select "Image File" and then browse the sub$-$directory where you saved a working copy of lab assignment's disk image file.

Deliverables $(5$pts$)$: Under "Evidence Tree," click or highlight "Lab$7-2$FAT$32\mathrm{.}001."$ Notice the contents on the panel on the right. Notice the caption underneath the bottom right panel. Th caption tells you where you are on your disk. Take a screenshot of your FTK Imager screen. Give a $1-2$ sentence description of your screenshot. Whenever you paste a screenshot, please give a $1-2$ sentence description so that we know you understand what your screenshot is about Answer these questions:

Where are you on your disk image?

Are you at the very beginning?

Under "Evidence Tree," click the plus $(+)$ sign beside "Lab$7-2$FAT$32\mathrm{.}001"$ to expand it$.$ Click on "Partition $1."$ Notice the contents of the bottom right panel. Does it look familiar? This is the Master Boot Record $($MBR$).$ Does this ring a bell?

Deliverables $(5$pts$)$: Highlight all the bytes belonging to the MBR$.$ By now, you should know hou many bytes belong to the MBR$.$ Take a screenshot and give a $1-2$ sentence description what your screenshot is about. Include answers to the questions below:

How many bytes are there for the MBR in Partition $1?$

What byte values mark the end of the MBR $($account for little endian ordering$)?$

What does the little caption underneath the bottom right panel show?

What is the length in bytes of the highlighted areas?

What is your physical sector offset address showing as$?$

Deliverables $(5$pts$)$: Highlight all the bytes belonging to the partition table. Take a screenshot of your FTK Image screen showing the highlighted partition table. Give a $1-2$ sentence description explaining what your screenshot is about. Answer the questions below:

How many entries are there in the partition table?