case:FT-SS-02
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 09:08:13
active_hit:0848 LIVE-Lupus-fat-ascii.txt
active_hit:0850 LIVE-Lupus-exfat-ascii.txt
active_hit:0852 LIVE-Lupus-ntfs-ascii.txt
active_hit:0864 LIVE-Cap-Lupus-fat-ascii.txt
active_hit:0866 LIVE-Cap-Lupus-exfat-ascii.txt
active_hit:0868 LIVE-Cap-Lupus-ntfs-ascii.txt
active_hit:0880 LIVE-AllCap-Lupus-fat-ascii.txt
active_hit:0882 LIVE-AllCap-Lupus-exfat-ascii.txt
active_hit:0884 LIVE-AllCap-Lupus-ntfs-ascii.txt
active_hit:0896 LIVE-Extinct-Lupus-fat-ascii.txt
active_hit:0898 LIVE-Extinct-Lupus-exfat-ascii.txt
active_hit:0900 LIVE-Extinct-Lupus-ntfs-ascii.txt
active_hit:0912 LIVE-Lycan-fat-ascii.txt
active_hit:0914 LIVE-Lycan-exfat-ascii.txt
active_hit:0916 LIVE-Lycan-ntfs-ascii.txt
deleted_hit:0849 DELETED-Lupus-fat-ascii.txt
deleted_hit:0851 DELETED-Lupus-exfat-ascii.txt
deleted_hit:0853 DELETED-Lupus-ntfs-ascii.txt
deleted_hit:0865 DELETED-Cap-Lupus-fat-ascii.txt
deleted_hit:0867 DELETED-Cap-Lupus-exfat-ascii.txt
deleted_hit:0869 DELETED-Cap-Lupus-ntfs-ascii.txt
deleted_hit:0881 DELETED-AllCap-Lupus-fat-ascii.txt
deleted_hit:0883 DELETED-AllCap-Lupus-exfat-ascii.txt
deleted_hit:0885 DELETED-AllCap-Lupus-ntfs-ascii.txt
deleted_hit:0897 DELETED-Extinct-Lupus-fat-ascii.txt
deleted_hit:0899 DELETED-Extinct-Lupus-exfat-ascii.txt
deleted_hit:0901 DELETED-Extinct-Lupus-ntfs-ascii.txt
deleted_hit:0913 DELETED-Lycan-fat-ascii.txt
deleted_hit:0915 DELETED-Lycan-exfat-ascii.txt
deleted_hit:0917 DELETED-Lycan-ntfs-ascii.txt
unalloc_hit:0854 500389039 977322 wolf utf-8
unalloc_hit:0870 500266166 977082  Wolf utf-8
unalloc_hit:0886 500171978 976898 WOLF utf-8
unalloc_hit:0902 500323512 977194 DireWolf utf-8
unalloc_hit:0918 500393145 977330 WereWolf utf-8
n_active_targets:15
n_active_hits:15
n_deleted_targets:15
n_deleted_hits:15
n_unalloc_targets:5
n_unalloc_hits:5
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.