case:FT-SS-09-Meta
engine:Indexed
dataset:UNIX
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-16 08:08:57
active_hit:0936 LIVE-LOUDBIRD-ext4-ascii.txt
active_hit:0938 LIVE-LOUDBIRD-osxj-ascii.txt
active_hit:0940 LIVE-LOUDBIRD-osxc-ascii.txt
active_hit:0942 LIVE-LOUDBIRD-apfs-ascii.txt
active_hit:2657 LIVE-WADI-ext4-utf-8.txt
active_hit:2665 LIVE-WADI-osxj-utf-8.txt
active_hit:2673 LIVE-WADI-osxc-utf-8.txt
active_hit:2681 LIVE-WADI-apfs-utf-8.txt
deleted_hit:0937 DELETED-LOUDBIRD-ext4-ascii.txt
deleted_hit:0939 DELETED-LOUDBIRD-osxj-ascii.txt
deleted_hit:0941 DELETED-LOUDBIRD-osxc-ascii.txt
deleted_hit:0943 DELETED-LOUDBIRD-apfs-ascii.txt
deleted_hit:2661 DELETED-WADI-ext4-utf-8.txt
deleted_hit:2669 DELETED-WADI-osxj-utf-8.txt
deleted_hit:2677 DELETED-WADI-osxc-utf-8.txt
deleted_hit:2685 DELETED-WADI-apfs-utf-8.txt
meta_ref:thunderbird:osxj:34
meta_ref:thunderbird:osxc:34
meta_ref:thunderbird:apfs:7
meta_ref:thunderbird:ext4:4
meta_ref:cañón:ext4:4
meta_hit:thunderbird:osxj:34
meta_hit:thunderbird:osxc:34
meta_hit:thunderbird:apfs:7
meta_hit:thunderbird:ext4:4
meta_hit:cañón:ext4:4
n_active_targets:8
n_active_hits:8
n_deleted_targets:8
n_deleted_hits:8
n_unalloc_targets:0
n_unalloc_hits:0
comments:
For the string "thunderbird" hits were reported in "0", ".journal", and "$catalog" files in the osxj and osxc (HFS+) file systems.