Thursday, December 23, 2010

Getting the File System Image and Deleted Data Recovery

Contents
  • Description of the FAT File System Format 
  • Reserved Area 
  • FAT Area 
  • Data Area 
  • Example of Recovering of Real Data 
  • Example

Description of the FAT File System Format

As the majority of modern flash drives are formatted in FAT file system, let’s examine the structure of this file system. This file system consists of 3 main areas: reserved area, table (FAT area), and data area. The reserved area stores the description of the file system structure. The FAT area contains the state of all clusters of the file system. The cluster can be free, used, or marked as damaged (bad). The data area contains the contents of files. So, if it is written “abc” in the text file, this value will be located in the data area.

Read more: Codeproject