< Back
Get-ForensicVolumeName
Post
NAME Get-ForensicVolumeName
SYNOPSIS
Gets the name of the specified volume.
SYNTAX
Get-ForensicVolumeName [[-VolumeName] <String>] [<CommonParameters>]
Get-ForensicVolumeName -Path <String> [<CommonParameters>]
DESCRIPTION
The Get-ForensicVolumeName cmdlet parses the $Volume file's $VOLUME_NAME attribute to return the name of the
specified volume.
By default, the cmdlet parses the $Volume file on the C:\\ drive. To specify an alternate target drive, use the
VolumeName parameter. To specify an exported $Volume file, use the Path parameter.
Except as noted, the cmdlets in the PowerForensics module require the permissions of a member of the
Administrators group on the computer. To run them, start Windows PowerShell with the 'Run as administrator' option.
PARAMETERS
-VolumeName [<String>]
Specifies the name of the volume or logical partition.
Enter the volume name in one of the following formats: \\\\.\\C:, C:, or C.
Required? false
Position? 0
Default value \\\\.\\C:
Accept pipeline input? false
Accept wildcard characters? false
-Path <String>
Path to file to be parsed.
Required? true
Position? named
Default value
Accept pipeline input? True (ByPropertyName)
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
System.String
OUTPUTS
PowerForensics.Ntfs.VolumeName
-------------------------- EXAMPLE 1 --------------------------
[ADMIN]: PS C:\\>Get-VolumeName -VolumeName \\\\.\\C:
VolumeNameString
----------------
testdrive
This command gets the name of the C:\\ logical volume.
-------------------------- EXAMPLE 2 --------------------------
[ADMIN]: PS C:\\>Get-VolumeName -Path 'C:\\evidence\\$Volume'
VolumeNameString
----------------
testdrive
This command gets the name of the volume in C:\\evidence\\$Volume file, and exported $Volume file.
RELATED LINKS
SYNOPSIS
Gets the name of the specified volume.
SYNTAX
Get-ForensicVolumeName [[-VolumeName] <String>] [<CommonParameters>]
Get-ForensicVolumeName -Path <String> [<CommonParameters>]
DESCRIPTION
The Get-ForensicVolumeName cmdlet parses the $Volume file's $VOLUME_NAME attribute to return the name of the
specified volume.
By default, the cmdlet parses the $Volume file on the C:\\ drive. To specify an alternate target drive, use the
VolumeName parameter. To specify an exported $Volume file, use the Path parameter.
Except as noted, the cmdlets in the PowerForensics module require the permissions of a member of the
Administrators group on the computer. To run them, start Windows PowerShell with the 'Run as administrator' option.
PARAMETERS
-VolumeName [<String>]
Specifies the name of the volume or logical partition.
Enter the volume name in one of the following formats: \\\\.\\C:, C:, or C.
Required? false
Position? 0
Default value \\\\.\\C:
Accept pipeline input? false
Accept wildcard characters? false
-Path <String>
Path to file to be parsed.
Required? true
Position? named
Default value
Accept pipeline input? True (ByPropertyName)
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
System.String
OUTPUTS
PowerForensics.Ntfs.VolumeName
-------------------------- EXAMPLE 1 --------------------------
[ADMIN]: PS C:\\>Get-VolumeName -VolumeName \\\\.\\C:
VolumeNameString
----------------
testdrive
This command gets the name of the C:\\ logical volume.
-------------------------- EXAMPLE 2 --------------------------
[ADMIN]: PS C:\\>Get-VolumeName -Path 'C:\\evidence\\$Volume'
VolumeNameString
----------------
testdrive
This command gets the name of the volume in C:\\evidence\\$Volume file, and exported $Volume file.
RELATED LINKS