FAT root directory

Tool requests, development, and troubleshooting topics related to TSK.

Moderator: carrier

FAT root directory

Postby User1234 » Thu Jun 08, 2017 10:10 am

Hy Guys,

does anybody know how TSK localizes the root directory in FAT case? Or how the directory entries are found? I read the FAT implementation notes but couldn´t figure it out. Does TSK really scanns all sectors?

Thanks for your reply
Posts: 1
Joined: Wed Jun 07, 2017 2:40 pm

Return to The Sleuth Kit (TSK)

Who is online

Users browsing this forum: No registered users and 0 guests