NTFS vs. FAT in forensics

NTFS vs. FAT in forensics

In NTFS, file metadata is stored in the Master File Table ($MFT) as opposed to the File Allocation Table in FAT systems. (Here we are talking about FAT32, which is still used on USB flash drives and in digital cameras. We’re not talking FAT12 and FAT16, which were used on floppy disks.)

There is much more rich data available in the $MFT, but what is the one thing provided by the MFT and not the FAT that makes it difficult to find small files?

Are there other noteworthy challenges?