> On Jan 12, 2017, at 18:14, Conrad Meyer <c...@freebsd.org> wrote: > > Forgot to mention: > > Documentation: > https://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274 > > Images for testing: http://www.cfreds.nist.gov/dfr-test-images.html > (raw disk images, include partition tables)
This commit doesn’t work as advertised: $ fstyp dfr-01-xfat.img fstyp: dfr-01-xfat.img: filesystem not recognized $ grep exfat `which fstyp` Binary file /usr/sbin/fstyp matches -Ngie
signature.asc
Description: Message signed with OpenPGP using GPGMail
