case:FT-SS-03
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 09:08:51
active_hit:0848 LIVE-Lupus-fat-ascii.txt
active_hit:0850 LIVE-Lupus-exfat-ascii.txt
active_hit:0852 LIVE-Lupus-ntfs-ascii.txt
active_hit:0864 LIVE-Cap-Lupus-fat-ascii.txt
active_hit:0866 LIVE-Cap-Lupus-exfat-ascii.txt
active_hit:0868 LIVE-Cap-Lupus-ntfs-ascii.txt
active_hit:0880 LIVE-AllCap-Lupus-fat-ascii.txt
active_hit:0882 LIVE-AllCap-Lupus-exfat-ascii.txt
active_hit:0884 LIVE-AllCap-Lupus-ntfs-ascii.txt
deleted_hit:0849 DELETED-Lupus-fat-ascii.txt
deleted_hit:0851 DELETED-Lupus-exfat-ascii.txt
deleted_hit:0853 DELETED-Lupus-ntfs-ascii.txt
deleted_hit:0865 DELETED-Cap-Lupus-fat-ascii.txt
deleted_hit:0867 DELETED-Cap-Lupus-exfat-ascii.txt
deleted_hit:0869 DELETED-Cap-Lupus-ntfs-ascii.txt
deleted_hit:0881 DELETED-AllCap-Lupus-fat-ascii.txt
deleted_hit:0883 DELETED-AllCap-Lupus-exfat-ascii.txt
deleted_hit:0885 DELETED-AllCap-Lupus-ntfs-ascii.txt
unalloc_hit:0854 500389039 977322 wolf utf-8
unalloc_hit:0870 500266166 977082  Wolf utf-8
unalloc_hit:0886 500171978 976898 WOLF utf-8
n_active_targets:9
n_active_hits:9
n_deleted_targets:9
n_deleted_hits:9
n_unalloc_targets:3
n_unalloc_hits:3
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.