diff --git a/NIST_Data_Leakage_Case/py_version/pycode/show_partitions.py b/NIST_Data_Leakage_Case/py_version/pycode/show_partitions.py
new file mode 100644
index 0000000..b51306e
--- /dev/null
+++ b/NIST_Data_Leakage_Case/py_version/pycode/show_partitions.py
@@ -0,0 +1,21 @@
+import sys
+import pytsk3
+
+# Get the name of the disk image from command line argument
+image_filename = sys.argv[1]
+
+# Create an Img_Info object to represent the image file
+disk_image = pytsk3.Img_Info(image_filename)
+
+# Create a Volume_Info object to access the partitions
+volume_info = pytsk3.Volume_Info(disk_image)
+
+# Loop through each partition and print its attributes
+for partition in volume_info:
+    print("Partition:", partition.addr)
+    print("Description:", partition.desc)
+    print("Start sector:", partition.start)
+    print("Length:", partition.len)
+    print()
+
+
diff --git a/NIST_Data_Leakage_Case/py_version/show_partitions.pptx b/NIST_Data_Leakage_Case/py_version/show_partitions.pptx
new file mode 100644
index 0000000..f457f45
Binary files /dev/null and b/NIST_Data_Leakage_Case/py_version/show_partitions.pptx differ