case:FT-SS-07-Cyrillic
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 10:08:46
active_hit:1185 LIVE-Siberia-fat-utf-8.txt
active_hit:1186 LIVE-Siberia-fat-utf-16-le.txt
active_hit:1187 LIVE-Siberia-fat-utf-16-be.txt
active_hit:1193 LIVE-Siberia-exfat-utf-8.txt
active_hit:1194 LIVE-Siberia-exfat-utf-16-le.txt
active_hit:1195 LIVE-Siberia-exfat-utf-16-be.txt
active_hit:1201 LIVE-Siberia-ntfs-utf-8.txt
active_hit:1202 LIVE-Siberia-ntfs-utf-16-le.txt
active_hit:1203 LIVE-Siberia-ntfs-utf-16-be.txt
deleted_hit:1189 DELETED-Siberia-fat-utf-8.txt
deleted_hit:1190 DELETED-Siberia-fat-utf-16-le.txt
deleted_hit:1191 DELETED-Siberia-fat-utf-16-be.txt
deleted_hit:1197 DELETED-Siberia-exfat-utf-8.txt
deleted_hit:1198 DELETED-Siberia-exfat-utf-16-le.txt
deleted_hit:1199 DELETED-Siberia-exfat-utf-16-be.txt
deleted_hit:1205 DELETED-Siberia-ntfs-utf-8.txt
deleted_hit:1206 DELETED-Siberia-ntfs-utf-16-le.txt
deleted_hit:1207 DELETED-Siberia-ntfs-utf-16-be.txt
unalloc_hit:1209 500569265 977674 Сибирь utf-8
unalloc_hit:1210 500565354 977666 Сибирь utf-16-le
unalloc_hit:1211 500561292 977658 Сибирь utf-16-be
n_active_targets:9
n_active_hits:9
n_deleted_targets:9
n_deleted_hits:9
n_unalloc_targets:3
n_unalloc_hits:3
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.