ExFAT

From SleuthKitWiki

Revision as of 11:01, 2 January 2014 by Apriestman (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to: navigation, search

ExFAT (Extended File Allocation Table) is a newer file system designed by Microsoft to be used on removable media. It is one of the file systems supported by TSK. See the exFAT Implementation Notes for details on how exFAT support was added to TSK.

Docs used during development:

http://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274

Retrieved from "https://wiki.sleuthkit.org/index.php?title=ExFAT&oldid=11255"

Navigation menu