From 24acd145151d9076228d37a2d92c313ea4dfd241 Mon Sep 17 00:00:00 2001
From: Frank Xu <frank.w.xu@gmail.com>
Date: Thu, 11 Oct 2018 11:02:28 -0400
Subject: [PATCH] add FAT larger files

---
 .gitattributes                                |  1 +
 .../Labs/Windows_FileSys_FAT/fat16_250m.001   |  3 ++
 .../Windows_FileSys_FAT/fat16_250m.001.txt    | 45 +++++++++++++++++++
 3 files changed, 49 insertions(+)
 create mode 100644 .gitattributes
 create mode 100644 FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001
 create mode 100644 FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..d63dcfd
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.001 filter=lfs diff=lfs merge=lfs -text
diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001 b/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001
new file mode 100644
index 0000000..7c507b5
--- /dev/null
+++ b/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0246269d16750a2d3e66deaabb21311883dff14d64fb6c1231450fe24ddc0c73
+size 262694912
diff --git a/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt b/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt
new file mode 100644
index 0000000..6ca406b
--- /dev/null
+++ b/FSCS727_Forensics/Labs/Windows_FileSys_FAT/fat16_250m.001.txt
@@ -0,0 +1,45 @@
+Created By AccessData® FTK® Imager 3.2.0.0 
+
+Case Information: 
+Acquired using: ADI3.2.0.0
+Case Number: UB-FSCS-272
+Evidence Number: 001
+Unique description: FAT default (16)
+Examiner: Frank
+Notes:  
+
+--------------------------------------------------------------
+
+Information for C:\Users\Fxu\Dropbox\Public\forTeaching\images\fat16\fat16_250m:
+
+Physical Evidentiary Item (Source) Information:
+[Device Info]
+ Source Type: Physical
+[Drive Geometry]
+ Cylinders: 31
+ Tracks per Cylinder: 255
+ Sectors per Track: 63
+ Bytes per Sector: 512
+ Sector Count: 513,076
+[Physical Drive Information]
+ Drive Model: PINGTEC Flash Disk USB Device
+ Drive Serial Number: 061826000D3A6900
+ Drive Interface Type: USB
+ Removable drive: True
+ Source data size: 250 MB
+ Sector count:    513076
+[Computed Hashes]
+ MD5 checksum:    f35662c9e38866e6a6e6ea4f46c0d5de
+ SHA1 checksum:   4f46e340b3ff9fc4208820b5a64c822cd0a97fb2
+
+Image Information:
+ Acquisition started:   Mon Oct 08 08:38:03 2018
+ Acquisition finished:  Mon Oct 08 08:38:36 2018
+ Segment list:
+  C:\Users\Fxu\Dropbox\Public\forTeaching\images\fat16\fat16_250m.001
+
+Image Verification Results:
+ Verification started:  Mon Oct 08 08:38:36 2018
+ Verification finished: Mon Oct 08 08:38:37 2018
+ MD5 checksum:    f35662c9e38866e6a6e6ea4f46c0d5de : verified
+ SHA1 checksum:   4f46e340b3ff9fc4208820b5a64c822cd0a97fb2 : verified