FAT

FAT is a file system that is used on some older Windows systems and on media cards in phones, cameras, and USB sticks. It is one of the file systems that is supported by TSK. While TSK has been designed to abstract many file system components into general layers (data, metadata, name, etc.), FAT has been the most difficult to abstract because it uses a very simple design. See the FAT Implementation Notes page for details on how it was merged into the layered model.

More details on FAT can be found at:

• File System Forensic Analysis Book
• Forensics Wiki Entry
• Wikipedia Entry

Docs used during development:

• FAT32 File System Specification 1.03 (MS)