InterviewSolution
Saved Bookmarks
| 1. |
How Would You Be Able To Tell At The Hex Level That A File Has Been Deleted In Fat12? |
|
Answer» Run fsstat against the FAT partition to gather DETAILS. Run FLS to get information about the image FILES. This will return information about DELETED files and the METADATA information. Run fsstat against the FAT partition to gather details. Run fls to get information about the image files. This will return information about deleted files and the metadata information. |
|