Reverse Engineering the Microsoft exFAT File System

The Extended FAT File System (exFAT) is a new and not yet widely used file system. It has been out for a few years and it will gain acceptance and momentum with the release of storage devices that will support the new SDXC standard. Forensics investigators and the maker of forensics tools need to...
Robert Shullich
February 18, 2010

All papers are copyrighted. No re-posting of papers is permitted