
Case: FT-SS-01
Strings
DireWolf
Settings
Case = Match Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = False
Active Files
0904 LIVE-Extinct-Lupus-ext4-ascii.txt
0906 LIVE-Extinct-Lupus-osxj-ascii.txt
0908 LIVE-Extinct-Lupus-osxc-ascii.txt
0910 LIVE-Extinct-Lupus-apfs-ascii.txt
Deleted Files
0905 DELETED-Extinct-Lupus-ext4-ascii.txt
0907 DELETED-Extinct-Lupus-osxj-ascii.txt
0909 DELETED-Extinct-Lupus-osxc-ascii.txt
0911 DELETED-Extinct-Lupus-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-02
Strings
wolf
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = False
Active Files
0856 LIVE-Lupus-ext4-ascii.txt
0858 LIVE-Lupus-osxj-ascii.txt
0860 LIVE-Lupus-osxc-ascii.txt
0862 LIVE-Lupus-apfs-ascii.txt
0872 LIVE-Cap-Lupus-ext4-ascii.txt
0874 LIVE-Cap-Lupus-osxj-ascii.txt
0876 LIVE-Cap-Lupus-osxc-ascii.txt
0878 LIVE-Cap-Lupus-apfs-ascii.txt
0888 LIVE-AllCap-Lupus-ext4-ascii.txt
0890 LIVE-AllCap-Lupus-osxj-ascii.txt
0892 LIVE-AllCap-Lupus-osxc-ascii.txt
0894 LIVE-AllCap-Lupus-apfs-ascii.txt
0904 LIVE-Extinct-Lupus-ext4-ascii.txt
0906 LIVE-Extinct-Lupus-osxj-ascii.txt
0908 LIVE-Extinct-Lupus-osxc-ascii.txt
0910 LIVE-Extinct-Lupus-apfs-ascii.txt
0920 LIVE-Lycan-ext4-ascii.txt
0922 LIVE-Lycan-osxj-ascii.txt
0924 LIVE-Lycan-osxc-ascii.txt
0926 LIVE-Lycan-apfs-ascii.txt
Deleted Files
0857 DELETED-Lupus-ext4-ascii.txt
0859 DELETED-Lupus-osxj-ascii.txt
0861 DELETED-Lupus-osxc-ascii.txt
0863 DELETED-Lupus-apfs-ascii.txt
0873 DELETED-Cap-Lupus-ext4-ascii.txt
0875 DELETED-Cap-Lupus-osxj-ascii.txt
0877 DELETED-Cap-Lupus-osxc-ascii.txt
0879 DELETED-Cap-Lupus-apfs-ascii.txt
0889 DELETED-AllCap-Lupus-ext4-ascii.txt
0891 DELETED-AllCap-Lupus-osxj-ascii.txt
0893 DELETED-AllCap-Lupus-osxc-ascii.txt
0895 DELETED-AllCap-Lupus-apfs-ascii.txt
0905 DELETED-Extinct-Lupus-ext4-ascii.txt
0907 DELETED-Extinct-Lupus-osxj-ascii.txt
0909 DELETED-Extinct-Lupus-osxc-ascii.txt
0911 DELETED-Extinct-Lupus-apfs-ascii.txt
0921 DELETED-Lycan-ext4-ascii.txt
0923 DELETED-Lycan-osxj-ascii.txt
0925 DELETED-Lycan-osxc-ascii.txt
0927 DELETED-Lycan-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-03
Strings
Wolf
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = True
Active Files
0856 LIVE-Lupus-ext4-ascii.txt
0858 LIVE-Lupus-osxj-ascii.txt
0860 LIVE-Lupus-osxc-ascii.txt
0862 LIVE-Lupus-apfs-ascii.txt
0872 LIVE-Cap-Lupus-ext4-ascii.txt
0874 LIVE-Cap-Lupus-osxj-ascii.txt
0876 LIVE-Cap-Lupus-osxc-ascii.txt
0878 LIVE-Cap-Lupus-apfs-ascii.txt
0888 LIVE-AllCap-Lupus-ext4-ascii.txt
0890 LIVE-AllCap-Lupus-osxj-ascii.txt
0892 LIVE-AllCap-Lupus-osxc-ascii.txt
0894 LIVE-AllCap-Lupus-apfs-ascii.txt
Deleted Files
0857 DELETED-Lupus-ext4-ascii.txt
0859 DELETED-Lupus-osxj-ascii.txt
0861 DELETED-Lupus-osxc-ascii.txt
0863 DELETED-Lupus-apfs-ascii.txt
0873 DELETED-Cap-Lupus-ext4-ascii.txt
0875 DELETED-Cap-Lupus-osxj-ascii.txt
0877 DELETED-Cap-Lupus-osxc-ascii.txt
0879 DELETED-Cap-Lupus-apfs-ascii.txt
0889 DELETED-AllCap-Lupus-ext4-ascii.txt
0891 DELETED-AllCap-Lupus-osxj-ascii.txt
0893 DELETED-AllCap-Lupus-osxc-ascii.txt
0895 DELETED-AllCap-Lupus-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-04
Strings
panda <b>and</b> fox
Settings
Logical = AND
Case = Match Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = True
<br>If a nearness/distance value is required, use either within 10 words or within 50 characters
Active Files
2952 LIVE-triple-ext4-ascii.txt
2954 LIVE-triple-osxj-ascii.txt
2956 LIVE-triple-osxc-ascii.txt
2958 LIVE-triple-apfs-ascii.txt
Deleted Files
2953 DELETED-triple-ext4-ascii.txt
2955 DELETED-triple-osxj-ascii.txt
2957 DELETED-triple-osxc-ascii.txt
2959 DELETED-triple-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-05
Strings
Were <b>or</b> DireW
Settings
Logical = OR
Case = Match Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = False
Active Files
0904 LIVE-Extinct-Lupus-ext4-ascii.txt
0906 LIVE-Extinct-Lupus-osxj-ascii.txt
0908 LIVE-Extinct-Lupus-osxc-ascii.txt
0910 LIVE-Extinct-Lupus-apfs-ascii.txt
0920 LIVE-Lycan-ext4-ascii.txt
0922 LIVE-Lycan-osxj-ascii.txt
0924 LIVE-Lycan-osxc-ascii.txt
0926 LIVE-Lycan-apfs-ascii.txt
Deleted Files
0905 DELETED-Extinct-Lupus-ext4-ascii.txt
0907 DELETED-Extinct-Lupus-osxj-ascii.txt
0909 DELETED-Extinct-Lupus-osxc-ascii.txt
0911 DELETED-Extinct-Lupus-apfs-ascii.txt
0921 DELETED-Lycan-ext4-ascii.txt
0923 DELETED-Lycan-osxj-ascii.txt
0925 DELETED-Lycan-osxc-ascii.txt
0927 DELETED-Lycan-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-06
Strings
fox <b>and not</b> tiger
Settings
Logical = NOT
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
<br>If a nearness/distance value is required, use either within 10 words or within 50 characters
Active Files
0816 LIVE-Vulpus-ext4-ascii.txt
0817 LIVE-Vulpus-ext4-utf-8.txt
0818 LIVE-Vulpus-ext4-utf-16-le.txt
0819 LIVE-Vulpus-ext4-utf-16-be.txt
0824 LIVE-Vulpus-osxj-ascii.txt
0825 LIVE-Vulpus-osxj-utf-8.txt
0826 LIVE-Vulpus-osxj-utf-16-le.txt
0827 LIVE-Vulpus-osxj-utf-16-be.txt
0832 LIVE-Vulpus-osxc-ascii.txt
0833 LIVE-Vulpus-osxc-utf-8.txt
0834 LIVE-Vulpus-osxc-utf-16-le.txt
0835 LIVE-Vulpus-osxc-utf-16-be.txt
0840 LIVE-Vulpus-apfs-ascii.txt
0841 LIVE-Vulpus-apfs-utf-8.txt
0842 LIVE-Vulpus-apfs-utf-16-le.txt
0843 LIVE-Vulpus-apfs-utf-16-be.txt
Deleted Files
0820 DELETED-Vulpus-ext4-ascii.txt
0821 DELETED-Vulpus-ext4-utf-8.txt
0822 DELETED-Vulpus-ext4-utf-16-le.txt
0823 DELETED-Vulpus-ext4-utf-16-be.txt
0828 DELETED-Vulpus-osxj-ascii.txt
0829 DELETED-Vulpus-osxj-utf-8.txt
0830 DELETED-Vulpus-osxj-utf-16-le.txt
0831 DELETED-Vulpus-osxj-utf-16-be.txt
0836 DELETED-Vulpus-osxc-ascii.txt
0837 DELETED-Vulpus-osxc-utf-8.txt
0838 DELETED-Vulpus-osxc-utf-16-le.txt
0839 DELETED-Vulpus-osxc-utf-16-be.txt
0844 DELETED-Vulpus-apfs-ascii.txt
0845 DELETED-Vulpus-apfs-utf-8.txt
0846 DELETED-Vulpus-apfs-utf-16-le.txt
0847 DELETED-Vulpus-apfs-utf-16-be.txt
Unallocated Space
Case: Finished

Case: FT-SS-07-Latin
Strings
garçon
Schönheit
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
2529 LIVE-Beauty-ext4-utf-8.txt
2530 LIVE-Beauty-ext4-utf-16-le.txt
2531 LIVE-Beauty-ext4-utf-16-be.txt
2537 LIVE-Beauty-osxj-utf-8.txt
2538 LIVE-Beauty-osxj-utf-16-le.txt
2539 LIVE-Beauty-osxj-utf-16-be.txt
2545 LIVE-Beauty-osxc-utf-8.txt
2546 LIVE-Beauty-osxc-utf-16-le.txt
2547 LIVE-Beauty-osxc-utf-16-be.txt
2553 LIVE-Beauty-apfs-utf-8.txt
2554 LIVE-Beauty-apfs-utf-16-le.txt
2555 LIVE-Beauty-apfs-utf-16-be.txt
2721 LIVE-Boy-ext4-utf-8.txt
2722 LIVE-Boy-ext4-utf-16-le.txt
2723 LIVE-Boy-ext4-utf-16-be.txt
2729 LIVE-Boy-osxj-utf-8.txt
2730 LIVE-Boy-osxj-utf-16-le.txt
2731 LIVE-Boy-osxj-utf-16-be.txt
2737 LIVE-Boy-osxc-utf-8.txt
2738 LIVE-Boy-osxc-utf-16-le.txt
2739 LIVE-Boy-osxc-utf-16-be.txt
2745 LIVE-Boy-apfs-utf-8.txt
2746 LIVE-Boy-apfs-utf-16-le.txt
2747 LIVE-Boy-apfs-utf-16-be.txt
Deleted Files
2533 DELETED-Beauty-ext4-utf-8.txt
2534 DELETED-Beauty-ext4-utf-16-le.txt
2535 DELETED-Beauty-ext4-utf-16-be.txt
2541 DELETED-Beauty-osxj-utf-8.txt
2542 DELETED-Beauty-osxj-utf-16-le.txt
2543 DELETED-Beauty-osxj-utf-16-be.txt
2549 DELETED-Beauty-osxc-utf-8.txt
2550 DELETED-Beauty-osxc-utf-16-le.txt
2551 DELETED-Beauty-osxc-utf-16-be.txt
2557 DELETED-Beauty-apfs-utf-8.txt
2558 DELETED-Beauty-apfs-utf-16-le.txt
2559 DELETED-Beauty-apfs-utf-16-be.txt
2725 DELETED-Boy-ext4-utf-8.txt
2726 DELETED-Boy-ext4-utf-16-le.txt
2727 DELETED-Boy-ext4-utf-16-be.txt
2733 DELETED-Boy-osxj-utf-8.txt
2734 DELETED-Boy-osxj-utf-16-le.txt
2735 DELETED-Boy-osxj-utf-16-be.txt
2741 DELETED-Boy-osxc-utf-8.txt
2742 DELETED-Boy-osxc-utf-16-le.txt
2743 DELETED-Boy-osxc-utf-16-be.txt
2749 DELETED-Boy-apfs-utf-8.txt
2750 DELETED-Boy-apfs-utf-16-le.txt
2751 DELETED-Boy-apfs-utf-16-be.txt
Unallocated Space
Case: Finished

Case: FT-SS-07-CJK-char
Strings
中国
東京
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
2017 LIVE-NewChina-ext4-utf-8.txt
2018 LIVE-NewChina-ext4-utf-16-le.txt
2019 LIVE-NewChina-ext4-utf-16-be.txt
2025 LIVE-NewChina-osxj-utf-8.txt
2026 LIVE-NewChina-osxj-utf-16-le.txt
2027 LIVE-NewChina-osxj-utf-16-be.txt
2033 LIVE-NewChina-osxc-utf-8.txt
2034 LIVE-NewChina-osxc-utf-16-le.txt
2035 LIVE-NewChina-osxc-utf-16-be.txt
2041 LIVE-NewChina-apfs-utf-8.txt
2042 LIVE-NewChina-apfs-utf-16-le.txt
2043 LIVE-NewChina-apfs-utf-16-be.txt
2913 LIVE-Tokyo-ext4-utf-8.txt
2914 LIVE-Tokyo-ext4-utf-16-le.txt
2915 LIVE-Tokyo-ext4-utf-16-be.txt
2921 LIVE-Tokyo-osxj-utf-8.txt
2922 LIVE-Tokyo-osxj-utf-16-le.txt
2923 LIVE-Tokyo-osxj-utf-16-be.txt
2929 LIVE-Tokyo-osxc-utf-8.txt
2930 LIVE-Tokyo-osxc-utf-16-le.txt
2931 LIVE-Tokyo-osxc-utf-16-be.txt
2937 LIVE-Tokyo-apfs-utf-8.txt
2938 LIVE-Tokyo-apfs-utf-16-le.txt
2939 LIVE-Tokyo-apfs-utf-16-be.txt
Deleted Files
2021 DELETED-NewChina-ext4-utf-8.txt
2022 DELETED-NewChina-ext4-utf-16-le.txt
2023 DELETED-NewChina-ext4-utf-16-be.txt
2029 DELETED-NewChina-osxj-utf-8.txt
2030 DELETED-NewChina-osxj-utf-16-le.txt
2031 DELETED-NewChina-osxj-utf-16-be.txt
2037 DELETED-NewChina-osxc-utf-8.txt
2038 DELETED-NewChina-osxc-utf-16-le.txt
2039 DELETED-NewChina-osxc-utf-16-be.txt
2045 DELETED-NewChina-apfs-utf-8.txt
2046 DELETED-NewChina-apfs-utf-16-le.txt
2047 DELETED-NewChina-apfs-utf-16-be.txt
2917 DELETED-Tokyo-ext4-utf-8.txt
2918 DELETED-Tokyo-ext4-utf-16-le.txt
2919 DELETED-Tokyo-ext4-utf-16-be.txt
2925 DELETED-Tokyo-osxj-utf-8.txt
2926 DELETED-Tokyo-osxj-utf-16-le.txt
2927 DELETED-Tokyo-osxj-utf-16-be.txt
2933 DELETED-Tokyo-osxc-utf-8.txt
2934 DELETED-Tokyo-osxc-utf-16-le.txt
2935 DELETED-Tokyo-osxc-utf-16-be.txt
2941 DELETED-Tokyo-apfs-utf-8.txt
2942 DELETED-Tokyo-apfs-utf-16-le.txt
2943 DELETED-Tokyo-apfs-utf-16-be.txt
Unallocated Space
Meta-Data
String:中国
Partition:osxj:count:2
Partition:osxc:count:2
Partition:apfs:count:4
String:東京
Partition:osxj:count:2
Partition:osxc:count:2
Partition:apfs:count:4
Case: Finished

Case: FT-SS-07-CJK-hangul
Strings
서울
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
2401 LIVE-Seoul-ext4-utf-8.txt
2402 LIVE-Seoul-ext4-utf-16-le.txt
2403 LIVE-Seoul-ext4-utf-16-be.txt
2409 LIVE-Seoul-osxj-utf-8.txt
2410 LIVE-Seoul-osxj-utf-16-le.txt
2411 LIVE-Seoul-osxj-utf-16-be.txt
2417 LIVE-Seoul-osxc-utf-8.txt
2418 LIVE-Seoul-osxc-utf-16-le.txt
2419 LIVE-Seoul-osxc-utf-16-be.txt
2425 LIVE-Seoul-apfs-utf-8.txt
2426 LIVE-Seoul-apfs-utf-16-le.txt
2427 LIVE-Seoul-apfs-utf-16-be.txt
Deleted Files
2405 DELETED-Seoul-ext4-utf-8.txt
2406 DELETED-Seoul-ext4-utf-16-le.txt
2407 DELETED-Seoul-ext4-utf-16-be.txt
2413 DELETED-Seoul-osxj-utf-8.txt
2414 DELETED-Seoul-osxj-utf-16-le.txt
2415 DELETED-Seoul-osxj-utf-16-be.txt
2421 DELETED-Seoul-osxc-utf-8.txt
2422 DELETED-Seoul-osxc-utf-16-le.txt
2423 DELETED-Seoul-osxc-utf-16-be.txt
2429 DELETED-Seoul-apfs-utf-8.txt
2430 DELETED-Seoul-apfs-utf-16-le.txt
2431 DELETED-Seoul-apfs-utf-16-be.txt
Unallocated Space
Case: Finished

Case: FT-SS-07-CJK-kana
Strings
スバル
みつびし
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
2209 LIVE-SubaruK-ext4-utf-8.txt
2210 LIVE-SubaruK-ext4-utf-16-le.txt
2211 LIVE-SubaruK-ext4-utf-16-be.txt
2217 LIVE-SubaruK-osxj-utf-8.txt
2218 LIVE-SubaruK-osxj-utf-16-le.txt
2219 LIVE-SubaruK-osxj-utf-16-be.txt
2225 LIVE-SubaruK-osxc-utf-8.txt
2226 LIVE-SubaruK-osxc-utf-16-le.txt
2227 LIVE-SubaruK-osxc-utf-16-be.txt
2233 LIVE-SubaruK-apfs-utf-8.txt
2234 LIVE-SubaruK-apfs-utf-16-le.txt
2235 LIVE-SubaruK-apfs-utf-16-be.txt
2337 LIVE-MitsubishiH-ext4-utf-8.txt
2338 LIVE-MitsubishiH-ext4-utf-16-le.txt
2339 LIVE-MitsubishiH-ext4-utf-16-be.txt
2345 LIVE-MitsubishiH-osxj-utf-8.txt
2346 LIVE-MitsubishiH-osxj-utf-16-le.txt
2347 LIVE-MitsubishiH-osxj-utf-16-be.txt
2353 LIVE-MitsubishiH-osxc-utf-8.txt
2354 LIVE-MitsubishiH-osxc-utf-16-le.txt
2355 LIVE-MitsubishiH-osxc-utf-16-be.txt
2361 LIVE-MitsubishiH-apfs-utf-8.txt
2362 LIVE-MitsubishiH-apfs-utf-16-le.txt
2363 LIVE-MitsubishiH-apfs-utf-16-be.txt
Deleted Files
2213 DELETED-SubaruK-ext4-utf-8.txt
2214 DELETED-SubaruK-ext4-utf-16-le.txt
2215 DELETED-SubaruK-ext4-utf-16-be.txt
2221 DELETED-SubaruK-osxj-utf-8.txt
2222 DELETED-SubaruK-osxj-utf-16-le.txt
2223 DELETED-SubaruK-osxj-utf-16-be.txt
2229 DELETED-SubaruK-osxc-utf-8.txt
2230 DELETED-SubaruK-osxc-utf-16-le.txt
2231 DELETED-SubaruK-osxc-utf-16-be.txt
2237 DELETED-SubaruK-apfs-utf-8.txt
2238 DELETED-SubaruK-apfs-utf-16-le.txt
2239 DELETED-SubaruK-apfs-utf-16-be.txt
2341 DELETED-MitsubishiH-ext4-utf-8.txt
2342 DELETED-MitsubishiH-ext4-utf-16-le.txt
2343 DELETED-MitsubishiH-ext4-utf-16-be.txt
2349 DELETED-MitsubishiH-osxj-utf-8.txt
2350 DELETED-MitsubishiH-osxj-utf-16-le.txt
2351 DELETED-MitsubishiH-osxj-utf-16-be.txt
2357 DELETED-MitsubishiH-osxc-utf-8.txt
2358 DELETED-MitsubishiH-osxc-utf-16-le.txt
2359 DELETED-MitsubishiH-osxc-utf-16-be.txt
2365 DELETED-MitsubishiH-apfs-utf-8.txt
2366 DELETED-MitsubishiH-apfs-utf-16-le.txt
2367 DELETED-MitsubishiH-apfs-utf-16-be.txt
Unallocated Space
Case: Finished

Case: FT-SS-07-Cyrillic
Strings
Сибирь
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
1217 LIVE-Siberia-ext4-utf-8.txt
1218 LIVE-Siberia-ext4-utf-16-le.txt
1219 LIVE-Siberia-ext4-utf-16-be.txt
1225 LIVE-Siberia-osxj-utf-8.txt
1226 LIVE-Siberia-osxj-utf-16-le.txt
1227 LIVE-Siberia-osxj-utf-16-be.txt
1233 LIVE-Siberia-osxc-utf-8.txt
1234 LIVE-Siberia-osxc-utf-16-le.txt
1235 LIVE-Siberia-osxc-utf-16-be.txt
1241 LIVE-Siberia-apfs-utf-8.txt
1242 LIVE-Siberia-apfs-utf-16-le.txt
1243 LIVE-Siberia-apfs-utf-16-be.txt
Deleted Files
1221 DELETED-Siberia-ext4-utf-8.txt
1222 DELETED-Siberia-ext4-utf-16-le.txt
1223 DELETED-Siberia-ext4-utf-16-be.txt
1229 DELETED-Siberia-osxj-utf-8.txt
1230 DELETED-Siberia-osxj-utf-16-le.txt
1231 DELETED-Siberia-osxj-utf-16-be.txt
1237 DELETED-Siberia-osxc-utf-8.txt
1238 DELETED-Siberia-osxc-utf-16-le.txt
1239 DELETED-Siberia-osxc-utf-16-be.txt
1245 DELETED-Siberia-apfs-utf-8.txt
1246 DELETED-Siberia-apfs-utf-16-le.txt
1247 DELETED-Siberia-apfs-utf-16-be.txt
Unallocated Space
Meta-Data
String:Сибирь
Partition:osxj:count:1
Partition:osxc:count:1
Partition:apfs:count:2
Case: Finished

Case: FT-SS-07-RTL
Strings
الكسكس
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
1505 LIVE-Couscous-ext4-utf-8.txt
1506 LIVE-Couscous-ext4-utf-16-le.txt
1507 LIVE-Couscous-ext4-utf-16-be.txt
1513 LIVE-Couscous-osxj-utf-8.txt
1514 LIVE-Couscous-osxj-utf-16-le.txt
1515 LIVE-Couscous-osxj-utf-16-be.txt
1521 LIVE-Couscous-osxc-utf-8.txt
1522 LIVE-Couscous-osxc-utf-16-le.txt
1523 LIVE-Couscous-osxc-utf-16-be.txt
1529 LIVE-Couscous-apfs-utf-8.txt
1530 LIVE-Couscous-apfs-utf-16-le.txt
1531 LIVE-Couscous-apfs-utf-16-be.txt
Deleted Files
1509 DELETED-Couscous-ext4-utf-8.txt
1510 DELETED-Couscous-ext4-utf-16-le.txt
1511 DELETED-Couscous-ext4-utf-16-be.txt
1517 DELETED-Couscous-osxj-utf-8.txt
1518 DELETED-Couscous-osxj-utf-16-le.txt
1519 DELETED-Couscous-osxj-utf-16-be.txt
1525 DELETED-Couscous-osxc-utf-8.txt
1526 DELETED-Couscous-osxc-utf-16-le.txt
1527 DELETED-Couscous-osxc-utf-16-be.txt
1533 DELETED-Couscous-apfs-utf-8.txt
1534 DELETED-Couscous-apfs-utf-16-le.txt
1535 DELETED-Couscous-apfs-utf-16-be.txt
Unallocated Space
Meta-Data
String:الكسكس
Partition:osxj:count:1
Partition:osxc:count:1
Partition:apfs:count:2
Case: Finished

Case: FT-SS-07-NoBOM
Strings
QuarterHorse
Россия
中國
فلافل
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
1089 LIVE-Russia-ext4-utf-8.txt
1090 LIVE-Russia-ext4-utf-16-le.txt
1091 LIVE-Russia-ext4-utf-16-be.txt
1097 LIVE-Russia-osxj-utf-8.txt
1098 LIVE-Russia-osxj-utf-16-le.txt
1099 LIVE-Russia-osxj-utf-16-be.txt
1105 LIVE-Russia-osxc-utf-8.txt
1106 LIVE-Russia-osxc-utf-16-le.txt
1107 LIVE-Russia-osxc-utf-16-be.txt
1113 LIVE-Russia-apfs-utf-8.txt
1114 LIVE-Russia-apfs-utf-16-le.txt
1115 LIVE-Russia-apfs-utf-16-be.txt
1569 LIVE-Falafel-ext4-utf-8.txt
1570 LIVE-Falafel-ext4-utf-16-le.txt
1571 LIVE-Falafel-ext4-utf-16-be.txt
1577 LIVE-Falafel-osxj-utf-8.txt
1578 LIVE-Falafel-osxj-utf-16-le.txt
1579 LIVE-Falafel-osxj-utf-16-be.txt
1585 LIVE-Falafel-osxc-utf-8.txt
1586 LIVE-Falafel-osxc-utf-16-le.txt
1587 LIVE-Falafel-osxc-utf-16-be.txt
1593 LIVE-Falafel-apfs-utf-8.txt
1594 LIVE-Falafel-apfs-utf-16-le.txt
1595 LIVE-Falafel-apfs-utf-16-be.txt
1953 LIVE-China-ext4-utf-8.txt
1954 LIVE-China-ext4-utf-16-le.txt
1955 LIVE-China-ext4-utf-16-be.txt
1961 LIVE-China-osxj-utf-8.txt
1962 LIVE-China-osxj-utf-16-le.txt
1963 LIVE-China-osxj-utf-16-be.txt
1969 LIVE-China-osxc-utf-8.txt
1970 LIVE-China-osxc-utf-16-le.txt
1971 LIVE-China-osxc-utf-16-be.txt
1977 LIVE-China-apfs-utf-8.txt
1978 LIVE-China-apfs-utf-16-le.txt
1979 LIVE-China-apfs-utf-16-be.txt
2592 LIVE-Equine-ext4-ascii.txt
2593 LIVE-Equine-ext4-utf-8.txt
2594 LIVE-Equine-ext4-utf-16-le.txt
2595 LIVE-Equine-ext4-utf-16-be.txt
2600 LIVE-Equine-osxj-ascii.txt
2601 LIVE-Equine-osxj-utf-8.txt
2602 LIVE-Equine-osxj-utf-16-le.txt
2603 LIVE-Equine-osxj-utf-16-be.txt
2608 LIVE-Equine-osxc-ascii.txt
2609 LIVE-Equine-osxc-utf-8.txt
2610 LIVE-Equine-osxc-utf-16-le.txt
2611 LIVE-Equine-osxc-utf-16-be.txt
2616 LIVE-Equine-apfs-ascii.txt
2617 LIVE-Equine-apfs-utf-8.txt
2618 LIVE-Equine-apfs-utf-16-le.txt
2619 LIVE-Equine-apfs-utf-16-be.txt
Deleted Files
1093 DELETED-Russia-ext4-utf-8.txt
1094 DELETED-Russia-ext4-utf-16-le.txt
1095 DELETED-Russia-ext4-utf-16-be.txt
1101 DELETED-Russia-osxj-utf-8.txt
1102 DELETED-Russia-osxj-utf-16-le.txt
1103 DELETED-Russia-osxj-utf-16-be.txt
1109 DELETED-Russia-osxc-utf-8.txt
1110 DELETED-Russia-osxc-utf-16-le.txt
1111 DELETED-Russia-osxc-utf-16-be.txt
1117 DELETED-Russia-apfs-utf-8.txt
1118 DELETED-Russia-apfs-utf-16-le.txt
1119 DELETED-Russia-apfs-utf-16-be.txt
1573 DELETED-Falafel-ext4-utf-8.txt
1574 DELETED-Falafel-ext4-utf-16-le.txt
1575 DELETED-Falafel-ext4-utf-16-be.txt
1581 DELETED-Falafel-osxj-utf-8.txt
1582 DELETED-Falafel-osxj-utf-16-le.txt
1583 DELETED-Falafel-osxj-utf-16-be.txt
1589 DELETED-Falafel-osxc-utf-8.txt
1590 DELETED-Falafel-osxc-utf-16-le.txt
1591 DELETED-Falafel-osxc-utf-16-be.txt
1597 DELETED-Falafel-apfs-utf-8.txt
1598 DELETED-Falafel-apfs-utf-16-le.txt
1599 DELETED-Falafel-apfs-utf-16-be.txt
1957 DELETED-China-ext4-utf-8.txt
1958 DELETED-China-ext4-utf-16-le.txt
1959 DELETED-China-ext4-utf-16-be.txt
1965 DELETED-China-osxj-utf-8.txt
1966 DELETED-China-osxj-utf-16-le.txt
1967 DELETED-China-osxj-utf-16-be.txt
1973 DELETED-China-osxc-utf-8.txt
1974 DELETED-China-osxc-utf-16-le.txt
1975 DELETED-China-osxc-utf-16-be.txt
1981 DELETED-China-apfs-utf-8.txt
1982 DELETED-China-apfs-utf-16-le.txt
1983 DELETED-China-apfs-utf-16-be.txt
2596 DELETED-Equine-ext4-ascii.txt
2597 DELETED-Equine-ext4-utf-8.txt
2598 DELETED-Equine-ext4-utf-16-le.txt
2599 DELETED-Equine-ext4-utf-16-be.txt
2604 DELETED-Equine-osxj-ascii.txt
2605 DELETED-Equine-osxj-utf-8.txt
2606 DELETED-Equine-osxj-utf-16-le.txt
2607 DELETED-Equine-osxj-utf-16-be.txt
2612 DELETED-Equine-osxc-ascii.txt
2613 DELETED-Equine-osxc-utf-8.txt
2614 DELETED-Equine-osxc-utf-16-le.txt
2615 DELETED-Equine-osxc-utf-16-be.txt
2620 DELETED-Equine-apfs-ascii.txt
2621 DELETED-Equine-apfs-utf-8.txt
2622 DELETED-Equine-apfs-utf-16-le.txt
2623 DELETED-Equine-apfs-utf-16-be.txt
Unallocated Space
Meta-Data
String:فلافل
Partition:osxj:count:1
Partition:osxc:count:1
Partition:apfs:count:2
String:Россия
Partition:osxj:count:1
Partition:osxc:count:1
Partition:apfs:count:2
String:中國
Partition:osxj:count:2
Partition:osxc:count:2
Partition:apfs:count:4
Case: Finished

Case: FT-SS-07-Norm
Strings
Use copy/paste from the file: <i>ft-ss-07-Norm-strings.txt</i> included in the data set download
Settings
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
2993 LIVE-NFC-tomorrow-ext4-utf-8.txt
2994 LIVE-NFC-tomorrow-ext4-utf-16-le.txt
2995 LIVE-NFC-tomorrow-ext4-utf-16-be.txt
3001 LIVE-NFC-tomorrow-osxj-utf-8.txt
3002 LIVE-NFC-tomorrow-osxj-utf-16-le.txt
3003 LIVE-NFC-tomorrow-osxj-utf-16-be.txt
3009 LIVE-NFC-tomorrow-osxc-utf-8.txt
3010 LIVE-NFC-tomorrow-osxc-utf-16-le.txt
3011 LIVE-NFC-tomorrow-osxc-utf-16-be.txt
3017 LIVE-NFC-tomorrow-apfs-utf-8.txt
3018 LIVE-NFC-tomorrow-apfs-utf-16-le.txt
3019 LIVE-NFC-tomorrow-apfs-utf-16-be.txt
3057 LIVE-NFC-freedom-ext4-utf-8.txt
3058 LIVE-NFC-freedom-ext4-utf-16-le.txt
3059 LIVE-NFC-freedom-ext4-utf-16-be.txt
3065 LIVE-NFC-freedom-osxj-utf-8.txt
3066 LIVE-NFC-freedom-osxj-utf-16-le.txt
3067 LIVE-NFC-freedom-osxj-utf-16-be.txt
3073 LIVE-NFC-freedom-osxc-utf-8.txt
3074 LIVE-NFC-freedom-osxc-utf-16-le.txt
3075 LIVE-NFC-freedom-osxc-utf-16-be.txt
3081 LIVE-NFC-freedom-apfs-utf-8.txt
3082 LIVE-NFC-freedom-apfs-utf-16-le.txt
3083 LIVE-NFC-freedom-apfs-utf-16-be.txt
3121 LIVE-NFC-mice-ext4-utf-8.txt
3122 LIVE-NFC-mice-ext4-utf-16-le.txt
3123 LIVE-NFC-mice-ext4-utf-16-be.txt
3129 LIVE-NFC-mice-osxj-utf-8.txt
3130 LIVE-NFC-mice-osxj-utf-16-le.txt
3131 LIVE-NFC-mice-osxj-utf-16-be.txt
3137 LIVE-NFC-mice-osxc-utf-8.txt
3138 LIVE-NFC-mice-osxc-utf-16-le.txt
3139 LIVE-NFC-mice-osxc-utf-16-be.txt
3145 LIVE-NFC-mice-apfs-utf-8.txt
3146 LIVE-NFC-mice-apfs-utf-16-le.txt
3147 LIVE-NFC-mice-apfs-utf-16-be.txt
3185 LIVE-NFD-tomorrow-ext4-utf-8.txt
3186 LIVE-NFD-tomorrow-ext4-utf-16-le.txt
3187 LIVE-NFD-tomorrow-ext4-utf-16-be.txt
3193 LIVE-NFD-tomorrow-osxj-utf-8.txt
3194 LIVE-NFD-tomorrow-osxj-utf-16-le.txt
3195 LIVE-NFD-tomorrow-osxj-utf-16-be.txt
3201 LIVE-NFD-tomorrow-osxc-utf-8.txt
3202 LIVE-NFD-tomorrow-osxc-utf-16-le.txt
3203 LIVE-NFD-tomorrow-osxc-utf-16-be.txt
3209 LIVE-NFD-tomorrow-apfs-utf-8.txt
3210 LIVE-NFD-tomorrow-apfs-utf-16-le.txt
3211 LIVE-NFD-tomorrow-apfs-utf-16-be.txt
3249 LIVE-NFD-freedom-ext4-utf-8.txt
3250 LIVE-NFD-freedom-ext4-utf-16-le.txt
3251 LIVE-NFD-freedom-ext4-utf-16-be.txt
3257 LIVE-NFD-freedom-osxj-utf-8.txt
3258 LIVE-NFD-freedom-osxj-utf-16-le.txt
3259 LIVE-NFD-freedom-osxj-utf-16-be.txt
3265 LIVE-NFD-freedom-osxc-utf-8.txt
3266 LIVE-NFD-freedom-osxc-utf-16-le.txt
3267 LIVE-NFD-freedom-osxc-utf-16-be.txt
3273 LIVE-NFD-freedom-apfs-utf-8.txt
3274 LIVE-NFD-freedom-apfs-utf-16-le.txt
3275 LIVE-NFD-freedom-apfs-utf-16-be.txt
3313 LIVE-NFD-mice-ext4-utf-8.txt
3314 LIVE-NFD-mice-ext4-utf-16-le.txt
3315 LIVE-NFD-mice-ext4-utf-16-be.txt
3321 LIVE-NFD-mice-osxj-utf-8.txt
3322 LIVE-NFD-mice-osxj-utf-16-le.txt
3323 LIVE-NFD-mice-osxj-utf-16-be.txt
3329 LIVE-NFD-mice-osxc-utf-8.txt
3330 LIVE-NFD-mice-osxc-utf-16-le.txt
3331 LIVE-NFD-mice-osxc-utf-16-be.txt
3337 LIVE-NFD-mice-apfs-utf-8.txt
3338 LIVE-NFD-mice-apfs-utf-16-le.txt
3339 LIVE-NFD-mice-apfs-utf-16-be.txt
3376 LIVE-AndBeyond-ext4-ascii.txt
3377 LIVE-AndBeyond-ext4-utf-8.txt
3378 LIVE-AndBeyond-ext4-utf-16-le.txt
3379 LIVE-AndBeyond-ext4-utf-16-be.txt
3384 LIVE-AndBeyond-osxj-ascii.txt
3385 LIVE-AndBeyond-osxj-utf-8.txt
3386 LIVE-AndBeyond-osxj-utf-16-le.txt
3387 LIVE-AndBeyond-osxj-utf-16-be.txt
3392 LIVE-AndBeyond-osxc-ascii.txt
3393 LIVE-AndBeyond-osxc-utf-8.txt
3394 LIVE-AndBeyond-osxc-utf-16-le.txt
3395 LIVE-AndBeyond-osxc-utf-16-be.txt
3400 LIVE-AndBeyond-apfs-ascii.txt
3401 LIVE-AndBeyond-apfs-utf-8.txt
3402 LIVE-AndBeyond-apfs-utf-16-le.txt
3403 LIVE-AndBeyond-apfs-utf-16-be.txt
3441 LIVE-LigatureAndBeyond-ext4-utf-8.txt
3442 LIVE-LigatureAndBeyond-ext4-utf-16-le.txt
3443 LIVE-LigatureAndBeyond-ext4-utf-16-be.txt
3449 LIVE-LigatureAndBeyond-osxj-utf-8.txt
3450 LIVE-LigatureAndBeyond-osxj-utf-16-le.txt
3451 LIVE-LigatureAndBeyond-osxj-utf-16-be.txt
3457 LIVE-LigatureAndBeyond-osxc-utf-8.txt
3458 LIVE-LigatureAndBeyond-osxc-utf-16-le.txt
3459 LIVE-LigatureAndBeyond-osxc-utf-16-be.txt
3465 LIVE-LigatureAndBeyond-apfs-utf-8.txt
3466 LIVE-LigatureAndBeyond-apfs-utf-16-le.txt
3467 LIVE-LigatureAndBeyond-apfs-utf-16-be.txt
Deleted Files
2997 DELETED-NFC-tomorrow-ext4-utf-8.txt
2998 DELETED-NFC-tomorrow-ext4-utf-16-le.txt
2999 DELETED-NFC-tomorrow-ext4-utf-16-be.txt
3005 DELETED-NFC-tomorrow-osxj-utf-8.txt
3006 DELETED-NFC-tomorrow-osxj-utf-16-le.txt
3007 DELETED-NFC-tomorrow-osxj-utf-16-be.txt
3013 DELETED-NFC-tomorrow-osxc-utf-8.txt
3014 DELETED-NFC-tomorrow-osxc-utf-16-le.txt
3015 DELETED-NFC-tomorrow-osxc-utf-16-be.txt
3021 DELETED-NFC-tomorrow-apfs-utf-8.txt
3022 DELETED-NFC-tomorrow-apfs-utf-16-le.txt
3023 DELETED-NFC-tomorrow-apfs-utf-16-be.txt
3061 DELETED-NFC-freedom-ext4-utf-8.txt
3062 DELETED-NFC-freedom-ext4-utf-16-le.txt
3063 DELETED-NFC-freedom-ext4-utf-16-be.txt
3069 DELETED-NFC-freedom-osxj-utf-8.txt
3070 DELETED-NFC-freedom-osxj-utf-16-le.txt
3071 DELETED-NFC-freedom-osxj-utf-16-be.txt
3077 DELETED-NFC-freedom-osxc-utf-8.txt
3078 DELETED-NFC-freedom-osxc-utf-16-le.txt
3079 DELETED-NFC-freedom-osxc-utf-16-be.txt
3085 DELETED-NFC-freedom-apfs-utf-8.txt
3086 DELETED-NFC-freedom-apfs-utf-16-le.txt
3087 DELETED-NFC-freedom-apfs-utf-16-be.txt
3125 DELETED-NFC-mice-ext4-utf-8.txt
3126 DELETED-NFC-mice-ext4-utf-16-le.txt
3127 DELETED-NFC-mice-ext4-utf-16-be.txt
3133 DELETED-NFC-mice-osxj-utf-8.txt
3134 DELETED-NFC-mice-osxj-utf-16-le.txt
3135 DELETED-NFC-mice-osxj-utf-16-be.txt
3141 DELETED-NFC-mice-osxc-utf-8.txt
3142 DELETED-NFC-mice-osxc-utf-16-le.txt
3143 DELETED-NFC-mice-osxc-utf-16-be.txt
3149 DELETED-NFC-mice-apfs-utf-8.txt
3150 DELETED-NFC-mice-apfs-utf-16-le.txt
3151 DELETED-NFC-mice-apfs-utf-16-be.txt
3189 DELETED-NFD-tomorrow-ext4-utf-8.txt
3190 DELETED-NFD-tomorrow-ext4-utf-16-le.txt
3191 DELETED-NFD-tomorrow-ext4-utf-16-be.txt
3197 DELETED-NFD-tomorrow-osxj-utf-8.txt
3198 DELETED-NFD-tomorrow-osxj-utf-16-le.txt
3199 DELETED-NFD-tomorrow-osxj-utf-16-be.txt
3205 DELETED-NFD-tomorrow-osxc-utf-8.txt
3206 DELETED-NFD-tomorrow-osxc-utf-16-le.txt
3207 DELETED-NFD-tomorrow-osxc-utf-16-be.txt
3213 DELETED-NFD-tomorrow-apfs-utf-8.txt
3214 DELETED-NFD-tomorrow-apfs-utf-16-le.txt
3215 DELETED-NFD-tomorrow-apfs-utf-16-be.txt
3253 DELETED-NFD-freedom-ext4-utf-8.txt
3254 DELETED-NFD-freedom-ext4-utf-16-le.txt
3255 DELETED-NFD-freedom-ext4-utf-16-be.txt
3261 DELETED-NFD-freedom-osxj-utf-8.txt
3262 DELETED-NFD-freedom-osxj-utf-16-le.txt
3263 DELETED-NFD-freedom-osxj-utf-16-be.txt
3269 DELETED-NFD-freedom-osxc-utf-8.txt
3270 DELETED-NFD-freedom-osxc-utf-16-le.txt
3271 DELETED-NFD-freedom-osxc-utf-16-be.txt
3277 DELETED-NFD-freedom-apfs-utf-8.txt
3278 DELETED-NFD-freedom-apfs-utf-16-le.txt
3279 DELETED-NFD-freedom-apfs-utf-16-be.txt
3317 DELETED-NFD-mice-ext4-utf-8.txt
3318 DELETED-NFD-mice-ext4-utf-16-le.txt
3319 DELETED-NFD-mice-ext4-utf-16-be.txt
3325 DELETED-NFD-mice-osxj-utf-8.txt
3326 DELETED-NFD-mice-osxj-utf-16-le.txt
3327 DELETED-NFD-mice-osxj-utf-16-be.txt
3333 DELETED-NFD-mice-osxc-utf-8.txt
3334 DELETED-NFD-mice-osxc-utf-16-le.txt
3335 DELETED-NFD-mice-osxc-utf-16-be.txt
3341 DELETED-NFD-mice-apfs-utf-8.txt
3342 DELETED-NFD-mice-apfs-utf-16-le.txt
3343 DELETED-NFD-mice-apfs-utf-16-be.txt
3380 DELETED-AndBeyond-ext4-ascii.txt
3381 DELETED-AndBeyond-ext4-utf-8.txt
3382 DELETED-AndBeyond-ext4-utf-16-le.txt
3383 DELETED-AndBeyond-ext4-utf-16-be.txt
3388 DELETED-AndBeyond-osxj-ascii.txt
3389 DELETED-AndBeyond-osxj-utf-8.txt
3390 DELETED-AndBeyond-osxj-utf-16-le.txt
3391 DELETED-AndBeyond-osxj-utf-16-be.txt
3396 DELETED-AndBeyond-osxc-ascii.txt
3397 DELETED-AndBeyond-osxc-utf-8.txt
3398 DELETED-AndBeyond-osxc-utf-16-le.txt
3399 DELETED-AndBeyond-osxc-utf-16-be.txt
3404 DELETED-AndBeyond-apfs-ascii.txt
3405 DELETED-AndBeyond-apfs-utf-8.txt
3406 DELETED-AndBeyond-apfs-utf-16-le.txt
3407 DELETED-AndBeyond-apfs-utf-16-be.txt
3445 DELETED-LigatureAndBeyond-ext4-utf-8.txt
3446 DELETED-LigatureAndBeyond-ext4-utf-16-le.txt
3447 DELETED-LigatureAndBeyond-ext4-utf-16-be.txt
3453 DELETED-LigatureAndBeyond-osxj-utf-8.txt
3454 DELETED-LigatureAndBeyond-osxj-utf-16-le.txt
3455 DELETED-LigatureAndBeyond-osxj-utf-16-be.txt
3461 DELETED-LigatureAndBeyond-osxc-utf-8.txt
3462 DELETED-LigatureAndBeyond-osxc-utf-16-le.txt
3463 DELETED-LigatureAndBeyond-osxc-utf-16-be.txt
3469 DELETED-LigatureAndBeyond-apfs-utf-8.txt
3470 DELETED-LigatureAndBeyond-apfs-utf-16-le.txt
3471 DELETED-LigatureAndBeyond-apfs-utf-16-be.txt
Unallocated Space
Case: Finished

Case: FT-SS-08-Email
Strings
no strings, tool-defined query for searching for email addresses
Settings
Email Address = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
0976 LIVE-email-iron-ext4-ascii.txt
0977 LIVE-email-iron-ext4-utf-8.txt
0978 LIVE-email-iron-ext4-utf-16-le.txt
0979 LIVE-email-iron-ext4-utf-16-be.txt
0984 LIVE-email-iron-osxj-ascii.txt
0985 LIVE-email-iron-osxj-utf-8.txt
0986 LIVE-email-iron-osxj-utf-16-le.txt
0987 LIVE-email-iron-osxj-utf-16-be.txt
0992 LIVE-email-iron-osxc-ascii.txt
0993 LIVE-email-iron-osxc-utf-8.txt
0994 LIVE-email-iron-osxc-utf-16-le.txt
0995 LIVE-email-iron-osxc-utf-16-be.txt
1000 LIVE-email-iron-apfs-ascii.txt
1001 LIVE-email-iron-apfs-utf-8.txt
1002 LIVE-email-iron-apfs-utf-16-le.txt
1003 LIVE-email-iron-apfs-utf-16-be.txt
1256 LIVE-email-capitol-ext4-ascii.txt
1258 LIVE-email-capitol-osxj-ascii.txt
1260 LIVE-email-capitol-osxc-ascii.txt
1262 LIVE-email-capitol-apfs-ascii.txt
1272 LIVE-email-kgb-ext4-ascii.txt
1274 LIVE-email-kgb-osxj-ascii.txt
1276 LIVE-email-kgb-osxc-ascii.txt
1278 LIVE-email-kgb-apfs-ascii.txt
1288 LIVE-email-berlin-ext4-ascii.txt
1290 LIVE-email-berlin-osxj-ascii.txt
1292 LIVE-email-berlin-osxc-ascii.txt
1294 LIVE-email-berlin-apfs-ascii.txt
Deleted Files
0980 DELETED-email-iron-ext4-ascii.txt
0981 DELETED-email-iron-ext4-utf-8.txt
0982 DELETED-email-iron-ext4-utf-16-le.txt
0983 DELETED-email-iron-ext4-utf-16-be.txt
0988 DELETED-email-iron-osxj-ascii.txt
0989 DELETED-email-iron-osxj-utf-8.txt
0990 DELETED-email-iron-osxj-utf-16-le.txt
0991 DELETED-email-iron-osxj-utf-16-be.txt
0996 DELETED-email-iron-osxc-ascii.txt
0997 DELETED-email-iron-osxc-utf-8.txt
0998 DELETED-email-iron-osxc-utf-16-le.txt
0999 DELETED-email-iron-osxc-utf-16-be.txt
1004 DELETED-email-iron-apfs-ascii.txt
1005 DELETED-email-iron-apfs-utf-8.txt
1006 DELETED-email-iron-apfs-utf-16-le.txt
1007 DELETED-email-iron-apfs-utf-16-be.txt
1257 DELETED-email-capitol-ext4-ascii.txt
1259 DELETED-email-capitol-osxj-ascii.txt
1261 DELETED-email-capitol-osxc-ascii.txt
1263 DELETED-email-capitol-apfs-ascii.txt
1273 DELETED-email-kgb-ext4-ascii.txt
1275 DELETED-email-kgb-osxj-ascii.txt
1277 DELETED-email-kgb-osxc-ascii.txt
1279 DELETED-email-kgb-apfs-ascii.txt
1289 DELETED-email-berlin-ext4-ascii.txt
1291 DELETED-email-berlin-osxj-ascii.txt
1293 DELETED-email-berlin-osxc-ascii.txt
1295 DELETED-email-berlin-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-08-Phone
Strings
no strings, tool-defined query for searching for phone numbers
Settings
Telephone Number = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
1304 LIVE-phone-1111-ext4-ascii.txt
1306 LIVE-phone-1111-osxj-ascii.txt
1308 LIVE-phone-1111-osxc-ascii.txt
1310 LIVE-phone-1111-apfs-ascii.txt
1320 LIVE-phone-1122-ext4-ascii.txt
1322 LIVE-phone-1122-osxj-ascii.txt
1324 LIVE-phone-1122-osxc-ascii.txt
1326 LIVE-phone-1122-apfs-ascii.txt
1360 LIVE-phone-9009-ext4-ascii.txt
1361 LIVE-phone-9009-ext4-utf-8.txt
1362 LIVE-phone-9009-ext4-utf-16-le.txt
1363 LIVE-phone-9009-ext4-utf-16-be.txt
1368 LIVE-phone-9009-osxj-ascii.txt
1369 LIVE-phone-9009-osxj-utf-8.txt
1370 LIVE-phone-9009-osxj-utf-16-le.txt
1371 LIVE-phone-9009-osxj-utf-16-be.txt
1376 LIVE-phone-9009-osxc-ascii.txt
1377 LIVE-phone-9009-osxc-utf-8.txt
1378 LIVE-phone-9009-osxc-utf-16-le.txt
1379 LIVE-phone-9009-osxc-utf-16-be.txt
1384 LIVE-phone-9009-apfs-ascii.txt
1385 LIVE-phone-9009-apfs-utf-8.txt
1386 LIVE-phone-9009-apfs-utf-16-le.txt
1387 LIVE-phone-9009-apfs-utf-16-be.txt
1400 LIVE-phone-3270-ext4-ascii.txt
1402 LIVE-phone-3270-osxj-ascii.txt
1404 LIVE-phone-3270-osxc-ascii.txt
1406 LIVE-phone-3270-apfs-ascii.txt
Deleted Files
1305 DELETED-phone-1111-ext4-ascii.txt
1307 DELETED-phone-1111-osxj-ascii.txt
1309 DELETED-phone-1111-osxc-ascii.txt
1311 DELETED-phone-1111-apfs-ascii.txt
1321 DELETED-phone-1122-ext4-ascii.txt
1323 DELETED-phone-1122-osxj-ascii.txt
1325 DELETED-phone-1122-osxc-ascii.txt
1327 DELETED-phone-1122-apfs-ascii.txt
1364 DELETED-phone-9009-ext4-ascii.txt
1365 DELETED-phone-9009-ext4-utf-8.txt
1366 DELETED-phone-9009-ext4-utf-16-le.txt
1367 DELETED-phone-9009-ext4-utf-16-be.txt
1372 DELETED-phone-9009-osxj-ascii.txt
1373 DELETED-phone-9009-osxj-utf-8.txt
1374 DELETED-phone-9009-osxj-utf-16-le.txt
1375 DELETED-phone-9009-osxj-utf-16-be.txt
1380 DELETED-phone-9009-osxc-ascii.txt
1381 DELETED-phone-9009-osxc-utf-8.txt
1382 DELETED-phone-9009-osxc-utf-16-le.txt
1383 DELETED-phone-9009-osxc-utf-16-be.txt
1388 DELETED-phone-9009-apfs-ascii.txt
1389 DELETED-phone-9009-apfs-utf-8.txt
1390 DELETED-phone-9009-apfs-utf-16-le.txt
1391 DELETED-phone-9009-apfs-utf-16-be.txt
1401 DELETED-phone-3270-ext4-ascii.txt
1403 DELETED-phone-3270-osxj-ascii.txt
1405 DELETED-phone-3270-osxc-ascii.txt
1407 DELETED-phone-3270-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-08-SS
Strings
no strings, tool-defined query for searching for Social Security Numbers
Settings
Social Security = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
1016 LIVE-ss-123-ext4-ascii.txt
1018 LIVE-ss-123-osxj-ascii.txt
1020 LIVE-ss-123-osxc-ascii.txt
1022 LIVE-ss-123-apfs-ascii.txt
1032 LIVE-ss-987-ext4-ascii.txt
1034 LIVE-ss-987-osxj-ascii.txt
1036 LIVE-ss-987-osxc-ascii.txt
1038 LIVE-ss-987-apfs-ascii.txt
1048 LIVE-ss-999-ext4-ascii.txt
1050 LIVE-ss-999-osxj-ascii.txt
1052 LIVE-ss-999-osxc-ascii.txt
1054 LIVE-ss-999-apfs-ascii.txt
Deleted Files
1017 DELETED-ss-123-ext4-ascii.txt
1019 DELETED-ss-123-osxj-ascii.txt
1021 DELETED-ss-123-osxc-ascii.txt
1023 DELETED-ss-123-apfs-ascii.txt
1033 DELETED-ss-987-ext4-ascii.txt
1035 DELETED-ss-987-osxj-ascii.txt
1037 DELETED-ss-987-osxc-ascii.txt
1039 DELETED-ss-987-apfs-ascii.txt
1049 DELETED-ss-999-ext4-ascii.txt
1051 DELETED-ss-999-osxj-ascii.txt
1053 DELETED-ss-999-osxc-ascii.txt
1055 DELETED-ss-999-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-09-Doc
Strings
shotgun
flintlock
rifle
revolver
longbow
crossbow
peroxide
nitroglycerin
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Whole Words = True
Active Files
8508 FMT-winchester-doc-utf8-unix.txt
8509 FMT-musket-doc-utf8fmt-unix.txt
8510 FMT-colt-doc-utf16-unix.txt
8511 FMT-smoothbore-doc-utf16fmt-unix.txt
8512 FMT-explosive-docx-unix.txt
8513 FMT-dynamite-docxfmt-unix.txt
8514 FMT-arrow-html-unix.txt
8515 FMT-bolt-htmlfmt-unix.txt
9508 FMT-winchester-doc-utf8-unix.doc
9509 FMT-musket-doc-utf8fmt-unix.doc
9510 FMT-colt-doc-utf16-unix.doc
9511 FMT-smoothbore-doc-utf16fmt-unix.doc
9512 FMT-explosive-docx-unix.docx
9513 FMT-dynamite-docxfmt-unix.docx
9514 FMT-arrow-html-unix.html
9515 FMT-bolt-htmlfmt-unix.html
Deleted Files
Unallocated Space
Case: Finished

Case: FT-SS-09-Frag
Strings
California
Washington
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = True
Active Files
Deleted Files
Unallocated Space
Case: Finished

Case: FT-SS-09-Lost
Strings
SecretKey
Disconnected
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Whole Words = False
Active Files
Deleted Files
Unallocated Space
Case: Finished

Case: FT-SS-09-MFT
Strings
bear
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = False
Whole Words = False
Active Files
Deleted Files
Unallocated Space
Case: Finished

Case: FT-SS-09-Meta
Strings
thunderbird
cañón
Settings
Case = Ignore Case
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Whole Words = False
Active Files
0936 LIVE-thunderbird-ext4-ascii.txt
0938 LIVE-thunderbird-osxj-ascii.txt
0940 LIVE-thunderbird-osxc-ascii.txt
0942 LIVE-thunderbird-apfs-ascii.txt
2657 LIVE-cañón-ext4-utf-8.txt
2665 LIVE-cañón-osxj-utf-8.txt
2673 LIVE-cañón-osxc-utf-8.txt
2681 LIVE-cañón-apfs-utf-8.txt
Deleted Files
0937 DELETED-thunderbird-ext4-ascii.txt
0939 DELETED-thunderbird-osxj-ascii.txt
0941 DELETED-thunderbird-osxc-ascii.txt
0943 DELETED-thunderbird-apfs-ascii.txt
2661 DELETED-cañón-ext4-utf-8.txt
2669 DELETED-cañón-osxj-utf-8.txt
2677 DELETED-cañón-osxc-utf-8.txt
2685 DELETED-cañón-apfs-utf-8.txt
Unallocated Space
Meta-Data
String:thunderbird
Partition:osxj:count:17
Partition:osxc:count:17
Partition:apfs:count:7
Partition:ext4:count:4
String:cañón
Partition:ext4:count:4
Case: Finished

Case: FT-SS-09-Stem
Strings
knife
steal
city
plan
Settings
Stemming = True
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
0152 LIVE-plot-ext4-ascii.txt
0154 LIVE-plot-osxj-ascii.txt
0156 LIVE-plot-osxc-ascii.txt
0158 LIVE-plot-apfs-ascii.txt
0168 LIVE-plots-ext4-ascii.txt
0170 LIVE-plots-osxj-ascii.txt
0172 LIVE-plots-osxc-ascii.txt
0174 LIVE-plots-apfs-ascii.txt
0184 LIVE-plotted-ext4-ascii.txt
0186 LIVE-plotted-osxj-ascii.txt
0188 LIVE-plotted-osxc-ascii.txt
0190 LIVE-plotted-apfs-ascii.txt
0200 LIVE-plotter-ext4-ascii.txt
0202 LIVE-plotter-osxj-ascii.txt
0204 LIVE-plotter-osxc-ascii.txt
0206 LIVE-plotter-apfs-ascii.txt
0216 LIVE-plotting-ext4-ascii.txt
0218 LIVE-plotting-osxj-ascii.txt
0220 LIVE-plotting-osxc-ascii.txt
0222 LIVE-plotting-apfs-ascii.txt
0472 LIVE-town-ext4-ascii.txt
0474 LIVE-town-osxj-ascii.txt
0476 LIVE-town-osxc-ascii.txt
0478 LIVE-town-apfs-ascii.txt
0512 LIVE-towns-ext4-ascii.txt
0513 LIVE-towns-ext4-utf-8.txt
0514 LIVE-towns-ext4-utf-16-le.txt
0515 LIVE-towns-ext4-utf-16-be.txt
0520 LIVE-towns-osxj-ascii.txt
0521 LIVE-towns-osxj-utf-8.txt
0522 LIVE-towns-osxj-utf-16-le.txt
0523 LIVE-towns-osxj-utf-16-be.txt
0528 LIVE-towns-osxc-ascii.txt
0529 LIVE-towns-osxc-utf-8.txt
0530 LIVE-towns-osxc-utf-16-le.txt
0531 LIVE-towns-osxc-utf-16-be.txt
0536 LIVE-towns-apfs-ascii.txt
0537 LIVE-towns-apfs-utf-8.txt
0538 LIVE-towns-apfs-utf-16-le.txt
0539 LIVE-towns-apfs-utf-16-be.txt
0584 LIVE-blade-ext4-ascii.txt
0586 LIVE-blade-osxj-ascii.txt
0588 LIVE-blade-osxc-ascii.txt
0590 LIVE-blade-apfs-ascii.txt
0600 LIVE-blades-ext4-ascii.txt
0602 LIVE-blades-osxj-ascii.txt
0604 LIVE-blades-osxc-ascii.txt
0606 LIVE-blades-apfs-ascii.txt
0664 LIVE-take-ext4-ascii.txt
0666 LIVE-take-osxj-ascii.txt
0668 LIVE-take-osxc-ascii.txt
0670 LIVE-take-apfs-ascii.txt
0680 LIVE-takeing-ext4-ascii.txt
0682 LIVE-takeing-osxj-ascii.txt
0684 LIVE-takeing-osxc-ascii.txt
0686 LIVE-takeing-apfs-ascii.txt
0696 LIVE-takes-ext4-ascii.txt
0698 LIVE-takes-osxj-ascii.txt
0700 LIVE-takes-osxc-ascii.txt
0702 LIVE-takes-apfs-ascii.txt
0744 LIVE-taker-ext4-ascii.txt
0746 LIVE-taker-osxj-ascii.txt
0748 LIVE-taker-osxc-ascii.txt
0750 LIVE-taker-apfs-ascii.txt
Deleted Files
0153 DELETED-plot-ext4-ascii.txt
0155 DELETED-plot-osxj-ascii.txt
0157 DELETED-plot-osxc-ascii.txt
0159 DELETED-plot-apfs-ascii.txt
0169 DELETED-plots-ext4-ascii.txt
0171 DELETED-plots-osxj-ascii.txt
0173 DELETED-plots-osxc-ascii.txt
0175 DELETED-plots-apfs-ascii.txt
0185 DELETED-plotted-ext4-ascii.txt
0187 DELETED-plotted-osxj-ascii.txt
0189 DELETED-plotted-osxc-ascii.txt
0191 DELETED-plotted-apfs-ascii.txt
0201 DELETED-plotter-ext4-ascii.txt
0203 DELETED-plotter-osxj-ascii.txt
0205 DELETED-plotter-osxc-ascii.txt
0207 DELETED-plotter-apfs-ascii.txt
0217 DELETED-plotting-ext4-ascii.txt
0219 DELETED-plotting-osxj-ascii.txt
0221 DELETED-plotting-osxc-ascii.txt
0223 DELETED-plotting-apfs-ascii.txt
0473 DELETED-town-ext4-ascii.txt
0475 DELETED-town-osxj-ascii.txt
0477 DELETED-town-osxc-ascii.txt
0479 DELETED-town-apfs-ascii.txt
0516 DELETED-towns-ext4-ascii.txt
0517 DELETED-towns-ext4-utf-8.txt
0518 DELETED-towns-ext4-utf-16-le.txt
0519 DELETED-towns-ext4-utf-16-be.txt
0524 DELETED-towns-osxj-ascii.txt
0525 DELETED-towns-osxj-utf-8.txt
0526 DELETED-towns-osxj-utf-16-le.txt
0527 DELETED-towns-osxj-utf-16-be.txt
0532 DELETED-towns-osxc-ascii.txt
0533 DELETED-towns-osxc-utf-8.txt
0534 DELETED-towns-osxc-utf-16-le.txt
0535 DELETED-towns-osxc-utf-16-be.txt
0540 DELETED-towns-apfs-ascii.txt
0541 DELETED-towns-apfs-utf-8.txt
0542 DELETED-towns-apfs-utf-16-le.txt
0543 DELETED-towns-apfs-utf-16-be.txt
0585 DELETED-blade-ext4-ascii.txt
0587 DELETED-blade-osxj-ascii.txt
0589 DELETED-blade-osxc-ascii.txt
0591 DELETED-blade-apfs-ascii.txt
0601 DELETED-blades-ext4-ascii.txt
0603 DELETED-blades-osxj-ascii.txt
0605 DELETED-blades-osxc-ascii.txt
0607 DELETED-blades-apfs-ascii.txt
0665 DELETED-take-ext4-ascii.txt
0667 DELETED-take-osxj-ascii.txt
0669 DELETED-take-osxc-ascii.txt
0671 DELETED-take-apfs-ascii.txt
0681 DELETED-takeing-ext4-ascii.txt
0683 DELETED-takeing-osxj-ascii.txt
0685 DELETED-takeing-osxc-ascii.txt
0687 DELETED-takeing-apfs-ascii.txt
0697 DELETED-takes-ext4-ascii.txt
0699 DELETED-takes-osxj-ascii.txt
0701 DELETED-takes-osxc-ascii.txt
0703 DELETED-takes-apfs-ascii.txt
0745 DELETED-taker-ext4-ascii.txt
0747 DELETED-taker-osxj-ascii.txt
0749 DELETED-taker-osxc-ascii.txt
0751 DELETED-taker-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-10-Hex
Strings
\x70\x61\x6e\x64\x61
Settings
Search Hexadecimal Expression = True
Active Files
2952 LIVE-triple-ext4-ascii.txt
2954 LIVE-triple-osxj-ascii.txt
2956 LIVE-triple-osxc-ascii.txt
2958 LIVE-triple-apfs-ascii.txt
Deleted Files
2953 DELETED-triple-ext4-ascii.txt
2955 DELETED-triple-osxj-ascii.txt
2957 DELETED-triple-osxc-ascii.txt
2959 DELETED-triple-apfs-ascii.txt
Unallocated Space
Case: Finished

Case: FT-SS-10-Regex
Strings
[DW]..eWolf
Settings
Search Regular Expression = True
ASCII = True
UTF-8, UTF-16-BE &amp; UTF-16-LE (Unicode) = True
Active Files
0904 LIVE-Extinct-Lupus-ext4-ascii.txt
0906 LIVE-Extinct-Lupus-osxj-ascii.txt
0908 LIVE-Extinct-Lupus-osxc-ascii.txt
0910 LIVE-Extinct-Lupus-apfs-ascii.txt
0920 LIVE-Lycan-ext4-ascii.txt
0922 LIVE-Lycan-osxj-ascii.txt
0924 LIVE-Lycan-osxc-ascii.txt
0926 LIVE-Lycan-apfs-ascii.txt
Deleted Files
0905 DELETED-Extinct-Lupus-ext4-ascii.txt
0907 DELETED-Extinct-Lupus-osxj-ascii.txt
0909 DELETED-Extinct-Lupus-osxc-ascii.txt
0911 DELETED-Extinct-Lupus-apfs-ascii.txt
0921 DELETED-Lycan-ext4-ascii.txt
0923 DELETED-Lycan-osxj-ascii.txt
0925 DELETED-Lycan-osxc-ascii.txt
0927 DELETED-Lycan-apfs-ascii.txt
Unallocated Space
Case: Finished
Done
