±Your Account
Membership:
New Today: 1
New Yesterday: 3
Overall: 24197
Visitors: 91±Latest Webinar
±Latest Articles
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Go to page 1, 2, 3 Next
That is correct.
Thanks for your input
I will check it out, thanks.
Thanks for your input
Thanks all, I think I know enough, a fresh start it will be.
Michael,
Please check your website, and check if it hasn't been compromised !!
My virus scanner, BitDefender, did not allow me to go to your website, due to malware !!
I assume this provides for your bread on the table, the roof over your head, I hope you can fix this soon !!
Cheers,
Peter, a collegue
PS. I quickly did a scan with virus total as well:
www.virustotal.com/url...358929538/
No issues found ... so maybe this is a false positive by BitDefender ?
In any case, worth chasing still.
ExFAT vs FAT32 (deeper mechanics)
ExFAT vs FAT32 (deeper mechanics)
Posted: Tue Jan 22, 2013 2:57 pm
Hi,
I'm looking into ExFAT and as a first introduction I read through this pdf:
reverse-engineering-microsoft-exfat-file-system_33274 (actually half way through)
It's getting a bit confusing and because it's been some time since I implemented FAT I'm not sure how different ExFAT is from FAT32. I feel I need to write some code first to see how things work rather than just reading text and not seeing the light.
A decision I need to make now is whether to extend my existing FAT implementation or start fresh for ExFAT (if too different). Right now I'm enclined to start again for ExFAT because the differences seem too great and it would clutter my FAT32 code too much.
To help me see the light I was wondering if anybody knows of a document / text that explains the *differences* between FAT32 and ExFAT on file-system level ? Or a document that explains what to add to an existing FAT32 implementation to support ExFAT (if that is at all possible).
As I said, from what I read, it seems quite different, but I haven't compared directory table structures yet etc. and maybe they're closer related than I feel right now.
Anyway, some input appreciated. I'm signing off. Reading that technical document while being tired is probably also not a good idea
I'm looking into ExFAT and as a first introduction I read through this pdf:
reverse-engineering-microsoft-exfat-file-system_33274 (actually half way through)
It's getting a bit confusing and because it's been some time since I implemented FAT I'm not sure how different ExFAT is from FAT32. I feel I need to write some code first to see how things work rather than just reading text and not seeing the light.
A decision I need to make now is whether to extend my existing FAT implementation or start fresh for ExFAT (if too different). Right now I'm enclined to start again for ExFAT because the differences seem too great and it would clutter my FAT32 code too much.
To help me see the light I was wondering if anybody knows of a document / text that explains the *differences* between FAT32 and ExFAT on file-system level ? Or a document that explains what to add to an existing FAT32 implementation to support ExFAT (if that is at all possible).
As I said, from what I read, it seems quite different, but I haven't compared directory table structures yet etc. and maybe they're closer related than I feel right now.
Anyway, some input appreciated. I'm signing off. Reading that technical document while being tired is probably also not a good idea
-

CyberGonzo - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Tue Jan 22, 2013 3:54 pm
I did a detailed study of exFAT last year for Lock and Code's Reference Guide. The paper you describe is the best source I found for exFAT. The other one is a snippet from Jeff Hamm titled "exfat-excerpt-1-4" (I forgot where I found it).
If you are writing a program for exFAT, you are going to have to make quite a few alterations. Honestly, I don't recall anything that remained exactly the same. The difference isn't as stark as FAT vs. NTFS, but still, you probably have to write new code (maybe use the FAT code as a starting point).
Sorry I don't have better information, but to go into every little thing that's different would take up a whole document, and you already have it.
If you are writing a program for exFAT, you are going to have to make quite a few alterations. Honestly, I don't recall anything that remained exactly the same. The difference isn't as stark as FAT vs. NTFS, but still, you probably have to write new code (maybe use the FAT code as a starting point).
Sorry I don't have better information, but to go into every little thing that's different would take up a whole document, and you already have it.
-

twjolson - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Tue Jan 22, 2013 5:30 pm
I would start from scratch. Most of exFAT does not rely on a FAT as most files are not fragmented. (I presume you are talking about Read only)
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
-

mscotgrove - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Tue Jan 22, 2013 8:29 pm
You can download a version of Jeff Hamm's ExFAT info at computer-forensics.san...at-ham.pdf
_________________
Tony Patrick, B. Inf Tech, CFCE
www.patrickcomputerfor...s.com/blog
www.twitter.com/Patrick4n6
_________________
Tony Patrick, B. Inf Tech, CFCE
www.patrickcomputerfor...s.com/blog
www.twitter.com/Patrick4n6
-

Patrick4n6 - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Wed Jan 23, 2013 3:16 am
- mscotgroveI presume you are talking about Read only
That is correct.
Thanks for your input
- Patrick4n6You can download a version of Jeff Hamm's ExFAT ...
I will check it out, thanks.
Thanks for your input
- twjolsonyou are going to have to make quite a few alterations
Thanks all, I think I know enough, a fresh start it will be.
-

CyberGonzo - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Wed Jan 23, 2013 3:26 am
- mscotgrovewww.cnwrecovery.com
Michael,
Please check your website, and check if it hasn't been compromised !!
My virus scanner, BitDefender, did not allow me to go to your website, due to malware !!
I assume this provides for your bread on the table, the roof over your head, I hope you can fix this soon !!
Cheers,
Peter, a collegue
PS. I quickly did a scan with virus total as well:
www.virustotal.com/url...358929538/
No issues found ... so maybe this is a false positive by BitDefender ?
In any case, worth chasing still.
-

CyberGonzo - Senior Member
Re: ExFAT vs FAT32 (deeper mechanics)
Posted: Wed Jan 23, 2013 7:28 am
Peter,
Thank you for your concern over my website. It looks OK with Norton. I was not aware of any problems - but will keep checking.
Michael
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
Thank you for your concern over my website. It looks OK with Norton. I was not aware of any problems - but will keep checking.
Michael
_________________
Michael Cotgrove
www.cnwrecovery.com
cnwrecovery.blogspot.com/
-

mscotgrove - Senior Member
















