exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Offset<br />
Hex<br />
Offset<br />
Dec<br />
Length Field Definition<br />
x00 0 1 Record Type x85 – Directory Entry Record<br />
x01 1 1 Secondary Count (Number of Additional 32<br />
Byte Records in the Entry)<br />
x02 2 2 Record Entry Checksum<br />
x04 4 2 DOS File Flags (Archive, Hidden, etc)<br />
x06 6 2 Unknown (Values only on Volume Label)<br />
x08 8 4 Created Date and Time<br />
x0C 12 4 Last Modified Date and Time<br />
x10 16 4 Last Accessed Date and Time<br />
x14 20 2 10 ms Increments Added to Created and<br />
Modified Times Respectively<br />
x18 22 3 Time Zone Offset Applied to the File Time<br />
63<br />
63<br />
© 2009-2010 J. Hamm<br />
© 2009-2010 J. Hamm R. Shullich
Change language