File Systems:
NTFS, FAT32,
EXT4
Understanding the
Core of Data Storage
Introduction
- WHAT IS A FILE SYSTEM? - WHY FILE SYSTEMS ARE - OVERVIEW OF NTFS,
CRUCIAL IN HACKING. FAT32, AND EXT4.
NTFS: New Technology
File System
• - Developed by Microsoft, default for
Windows.
• - Features:
• • File permissions (ACL-based).
• • Journaling for data integrity.
• • Alternate Data Streams (ADS).
• - Strengths: Secure, supports large
files.
• - Weaknesses: Limited cross-platform
use.
• - Common exploit: Hiding data in ADS.
• - Widely compatible and simple.
• - Features:
• • Minimal metadata, lightweight.
FAT32: File •
•
• Supports smaller drives and devices.
- Strengths: Universally readable.
Allocation Table • - Weaknesses: 4GB file size limit, no
journaling.
• - Common exploit: Easy bypass of
security due to lack of permissions.
EXT4: Fourth Extended
File System
• - Default for Linux systems.
• - Features:
• • Journaling for reliability.
• • Handles massive files and partitions.
• • Extents reduce fragmentation.
• - Strengths: High performance, Linux-
compatible.
• - Weaknesses: Limited Windows support.
• - Common exploit: Misconfigured
permissions.
Comparison of
File Systems
• Please review the table :
Tools for Exploring File
Systems
• - NTFS:
• • MFTParser, NTFS Explorer.
• - FAT32:
• • Autopsy, R-Studio.
• - EXT4:
• • extundelete, e2fsck.
• - Use these tools for forensic analysis and
vulnerability discovery.
- File systems are essential for data
storage and security.
- NTFS, FAT32, and EXT4 each have
Conclusion unique strengths and use cases.
- Mastering these systems aids in
hacking, forensics, and optimization.
Practice Questions
(Review Slides 1-4)
• What is the primary purpose of a file
system?
• Name two key features of NTFS and explain
their significance.
• What is the maximum file size supported by
FAT32, and how does it affect its usage?
• Why is journaling an important feature in a
file system like NTFS?
Practice Questions
(Review Slides 5-8)
• Compare NTFS, FAT32, and EXT4 based on
their compatibility with operating systems.
• What are Alternate Data Streams (ADS),
and how can they be exploited in NTFS?
• Explain why FAT32 is commonly used for
USB drives despite its limitations.
• How does journaling in EXT4 enhance data
reliability?
• Name one tool for analyzing each file
system (NTFS, FAT32, EXT4) and their use
case in forensic analysis.
• What are PCIe lanes, and how do they
relate to file system performance in SSDs?