exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Unallocated records are tracked by switching<br />
one bit in the entry.<br />
Unallocated may be marked if a file name<br />
is changed – this is not exclusive to deletion.<br />
If the first bit is “1”, then the record is in use.<br />
If the first bit is “0”, then the record is not in<br />
use.<br />
73<br />
73<br />
© 2009-2010 J. Hamm<br />
© 2009-2010 J. Hamm R. Shullich
Change language