Hiding data persistently in a FAT32 file system. The data get written onto the disk with low-level tools like ‘dd’ or ‘hexedit’. This sector/cluster get marked as defect with the file system specific mechanism.
Afterwards we will evaluate the file system behavior when writing more data on the disk. And how forensics tool handle this specific cases.