Talk With an Expert

Reverse Engineering the Microsoft exFAT File System

Reverse Engineering the Microsoft exFAT File System (PDF, 4.28MB)Published: 18 Feb, 2010
Created by
Robert Shullich

The Extended FAT File System (exFAT) is a new and not yet widely used file system. It has been out for a few years and it will gain acceptance and momentum with the release of storage devices that will support the new SDXC standard. Forensics investigators and the maker of forensics tools need to be ready and prepared for an influx of acquired evidence that requires analysis of this new file structure.