Difference between revisions of "ExFAT"

Revision as of 12:01, 2 January 2014

ExFAT (Extended File Allocation Table) is a newer file system designed by Microsoft to be used on removable media. It is one of the file systems supported by TSK. See the exFAT Implementation Notes for details on how exFAT support was added to TSK.

Docs used during development:

• http://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274