O'Reilly logo

EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition by Steve Bunting

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

exFAT

In 2006, Microsoft introduced the exFAT file system with Windows Embedded CE 6.0, and shortly thereafter it appeared in Windows Vista with Service Pack 1. It is a proprietary file system designed for flash media and is often dubbed FAT64. While it has many other new features, exFAT boasts a file size limit of 16 EiB (1 exbibyte = 260 bytes = 1,152,921,504,606,846,976 bytes). For years, FAT32 had imposed a file size limit of 4 GB. This huge file size limit was welcome news for forensic examiners needing to store large files on a robust file system that is compatible with many operating systems.

The following operating systems support exFAT as well:

  • Windows XP and Windows Server 2003, running Service Pack 2 and with a special patch (KB955704) ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required