Question:
Why did FTK generate an "Overflow.1" folder during file export?
What is the significance of the "Overflow.1" folder in an FTK export?
Answer:
FTK generates "Overflow" folders during export, if "maintain folder structure" is used and any resulting exported UNC path becomes longer than Windows' maximum allowed character limit for a UNC path (260 characters).
Any exported paths, that will exceed the 255 character UNC path length limitation, will have their folder path located within an "Overflow.1" directory, as well as any other subsequent overflow directories (e.g. "Overflow.2," "Overflow.3," etc.).
Reference link for Window's "MAX_PATH":
https://msdn.microsoft.com/en-us/library/windows/desktop/aa365247(v=vs.85).aspx
Applies to:
AD Enterprise
AD LAB
FTK