Linux Disks Enumeration

mirai

It's possible that some medias such as USB keys are connect to the host. Look in /media for any of them.

$ ls /media -lah
$ cat /proc/mounts | grep media

The second command will display the block device file associated with the mounted media partition.

As this is a file, we can use grep to fix interesting strings on it. We can also dump it to analyze it using either:

$ sudo dd if=/dev/sdb of=/tmp/data.bin bs=4M
$ sudo dcfldd if=/dev/sdb of=/tmp/data.bin

πŸ‘» To-do πŸ‘»

Stuff that I found, but never read/used yet.

  • Unmounted hard drives
  • $ udevadm info -a -n /dev/xxx