case:FT-SS-01
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 09:08:11
active_hit:0896 LIVE-Extinct-Lupus-fat-ascii.txt
active_hit:0898 LIVE-Extinct-Lupus-exfat-ascii.txt
active_hit:0900 LIVE-Extinct-Lupus-ntfs-ascii.txt
deleted_hit:0897 DELETED-Extinct-Lupus-fat-ascii.txt
deleted_hit:0899 DELETED-Extinct-Lupus-exfat-ascii.txt
deleted_hit:0901 DELETED-Extinct-Lupus-ntfs-ascii.txt
unalloc_hit:0902 500323512 977194 DireWolf utf-8
n_active_targets:3
n_active_hits:3
n_deleted_targets:3
n_deleted_hits:3
n_unalloc_targets:1
n_unalloc_hits:1
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.