CPT 499C Lecture 4 FAT Revisited

CPT 499C Lecture 4 FAT Revisited - FAT Format Slide 1...

Info iconThis preview shows pages 1–10. Sign up to view the full content.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: FAT Format Slide 1 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY FAT 16 / FAT 32 Formatting FAT Format Slide 2 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Objectives Students will be able to – List the FAT file system components – Explain the concept of clusters – Compare the differences between FAT16 and FAT32 system areas – List the actions of the DOS FORMAT /U command on floppy vs hard drives – Compare the DOS and Windows GUI versions of FORMAT FAT Format Slide 3 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Start with a Partitioned Hard Drive Primary Active Partition Logical Drive C — FAT 16 File System MBR Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Partition Table This hard drive is partitioned, but each logical drive must be formatted before it can be used Extended Partition Logical Drive D — FAT 32 File System FAT Format Slide 4 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY The FORMAT Command The FORMAT command creates three distinct areas on each logical drive – Boot Record – File Allocation Tables (FATs) – Root Directory These areas keep track of the files stored on that drive FAT Format Slide 5 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Discussion: Boot Record • Forensically significant Information in a FAT16 BR: – Length in Sectors – Cluster size – Logical geometry FAT Format Slide 6 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Discussion: Boot Record • Additional information in a FAT32 BR: – Location of Root Directory – Next available cluster* – Number of free clusters • 2 nd copy of FAT32 BR FAT Format Slide 7 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Discussion: FAT Entries • Information in the FAT: – Each entry corresponds to a specific cluster • Data in “Little Endian” format – 0000 = cluster available – F7FF = cluster is bad – F8FF* = last cluster in this file • (F8FF, F9FFF… FFFF) – Any other number = pointer to next cluster FAT Format Slide 8 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Discussion: Directory Entries DOS 6.22 Bytes 1-8 Filename Bytes 9-11 Extension Byte 12 Attribute Byte 13 Unused Bytes 14-16 Unused Bytes 17-18 Unused Bytes 19-20 Unused Bytes 21-22 Unused Bytes 23-24 Mod. Time Bytes 25-26 Mod. Date Bytes 27-28 Starting Cluster Bytes 29-32 File Size WIN 9X / ME/2K/XP Bytes 1-8 Filename Bytes 9-11 Extension Byte 12 Attribute Byte 13 NT Info Bytes 14-16 Creation Time Bytes 17-18 Creation Date Bytes 19-20 Access Date Bytes 21-22 Cluster High* ( FAT32 ) Bytes 23-24 Mod. Time Bytes 25-26 Mod. Date Bytes 27-28 Starting Cluster Bytes 29-32 File Size FAT Format Slide 9 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY The FORMAT process is different for FAT 16 & FAT 32 Formatting Extended Partition Logical Drive D — FAT 32 File System Primary Active Partition Logical Drive C — FAT 16 File System MBR Reserved Reserved...
View Full Document

{[ snackBarMessage ]}

Page1 / 39

CPT 499C Lecture 4 FAT Revisited - FAT Format Slide 1...

This preview shows document pages 1 - 10. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online