> On Jan 12, 2017, at 19:57, Ngie Cooper (yaneurabeya)
> wrote:
>
>
>> On Jan 12, 2017, at 18:14, Conrad Meyer wrote:
>>
>> Forgot to mention:
>>
>> Documentation:
>> https://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274
>>
>> Images
> On Jan 12, 2017, at 18:14, Conrad Meyer wrote:
>
> Forgot to mention:
>
> Documentation:
> https://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274
>
> Images for testing: http://www.cfreds.nist.gov/dfr-test-images.html
> (raw disk images
Forgot to mention:
Documentation:
https://www.sans.org/reading-room/whitepapers/forensics/reverse-engineering-microsoft-exfat-file-system-33274
Images for testing: http://www.cfreds.nist.gov/dfr-test-images.html
(raw disk images, include partition tables)
On Thu, Jan 12, 2017 at 6:12 PM, Conra
