dfxml:first_block 

Address of first block of the file system, in bytes. This appears to be
relative to the beginning of the partition; in The SleuthKit's code base, the code
"->first_block" only ever appears on the left-hand side of an assignment statement when
"0" is on the right-hand-side. (That is, this is always 0 in TSK-based
results.)

Element Information

Model

Attributes

Used By

Element dfxml:volume

Source 

<xs:element name="first_block" type="dfxml:nonNegativeInteger">
  <xs:annotation>
    <xs:documentation>Address of first block of the file system, in bytes. This appears to be relative to the beginning of the partition; in The SleuthKit's code base, the code "->first_block" only ever appears on the left-hand side of an assignment statement when "0" is on the right-hand-side. (That is, this is always 0 in TSK-based results.)</xs:documentation>
  </xs:annotation>
</xs:element>

Sample