Exploit Notes

Windows Disk Management

Last modified: 2023-02-09

Windows

Disk Management is a system utility in Windows that enables you to perform advanced storage tasks.

Partitions

Check partitions with it.

  1. Open the 'Disk Management'

  2. Right click the partition to view the properties

  3. Check 'Security' tab or 'Shadow Copies' tab

  • Check Partition in Windows Explorer

    1. Right click the partition and click 'Change Drive Letter and Paths'
    2. Open dialog.
    3. Click 'Add'. In the dropdown, choose a letter (ex. Z:) and click 'OK'.
    4. At the top, in the Volume column, you should see that the partition has a letter (Z:) assigned to.
    5. Open Windows Explorer and check if Z: exists on 'This PC'.
    6. Click the partition (Z:) and click 'View' tab at the top then check 'Hidden Items'.

  • Restore the previous version of partition

    1. Right click the partition and click 'Properties' -> 'Previous Versions'
    2. Select shadow copy you want to restore and click 'Restore'. The Confirmation popup open, then click 'Restore'.