case:FT-SS-07-NoBOM
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 09:08:26
active_hit:1057 LIVE-Russia-fat-utf-8.txt
active_hit:1058 LIVE-Russia-fat-utf-16-le.txt
active_hit:1059 LIVE-Russia-fat-utf-16-be.txt
active_hit:1065 LIVE-Russia-exfat-utf-8.txt
active_hit:1066 LIVE-Russia-exfat-utf-16-le.txt
active_hit:1067 LIVE-Russia-exfat-utf-16-be.txt
active_hit:1073 LIVE-Russia-ntfs-utf-8.txt
active_hit:1074 LIVE-Russia-ntfs-utf-16-le.txt
active_hit:1075 LIVE-Russia-ntfs-utf-16-be.txt
active_hit:1537 LIVE-Falafel-fat-utf-8.txt
active_hit:1538 LIVE-Falafel-fat-utf-16-le.txt
active_hit:1539 LIVE-Falafel-fat-utf-16-be.txt
active_hit:1545 LIVE-Falafel-exfat-utf-8.txt
active_hit:1546 LIVE-Falafel-exfat-utf-16-le.txt
active_hit:1547 LIVE-Falafel-exfat-utf-16-be.txt
active_hit:1553 LIVE-Falafel-ntfs-utf-8.txt
active_hit:1554 LIVE-Falafel-ntfs-utf-16-le.txt
active_hit:1555 LIVE-Falafel-ntfs-utf-16-be.txt
active_hit:1921 LIVE-China-fat-utf-8.txt
active_hit:1922 LIVE-China-fat-utf-16-le.txt
active_hit:1923 LIVE-China-fat-utf-16-be.txt
active_hit:1929 LIVE-China-exfat-utf-8.txt
active_hit:1930 LIVE-China-exfat-utf-16-le.txt
active_hit:1931 LIVE-China-exfat-utf-16-be.txt
active_hit:1937 LIVE-China-ntfs-utf-8.txt
active_hit:1938 LIVE-China-ntfs-utf-16-le.txt
active_hit:1939 LIVE-China-ntfs-utf-16-be.txt
active_hit:2560 LIVE-Equine-fat-ascii.txt
active_hit:2561 LIVE-Equine-fat-utf-8.txt
active_hit:2562 LIVE-Equine-fat-utf-16-le.txt
active_hit:2563 LIVE-Equine-fat-utf-16-be.txt
active_hit:2568 LIVE-Equine-exfat-ascii.txt
active_hit:2569 LIVE-Equine-exfat-utf-8.txt
active_hit:2570 LIVE-Equine-exfat-utf-16-le.txt
active_hit:2571 LIVE-Equine-exfat-utf-16-be.txt
active_hit:2576 LIVE-Equine-ntfs-ascii.txt
active_hit:2577 LIVE-Equine-ntfs-utf-8.txt
active_hit:2578 LIVE-Equine-ntfs-utf-16-le.txt
active_hit:2579 LIVE-Equine-ntfs-utf-16-be.txt
deleted_hit:1061 DELETED-Russia-fat-utf-8.txt
deleted_hit:1062 DELETED-Russia-fat-utf-16-le.txt
deleted_hit:1063 DELETED-Russia-fat-utf-16-be.txt
deleted_hit:1069 DELETED-Russia-exfat-utf-8.txt
deleted_hit:1070 DELETED-Russia-exfat-utf-16-le.txt
deleted_hit:1071 DELETED-Russia-exfat-utf-16-be.txt
deleted_hit:1077 DELETED-Russia-ntfs-utf-8.txt
deleted_hit:1078 DELETED-Russia-ntfs-utf-16-le.txt
deleted_hit:1079 DELETED-Russia-ntfs-utf-16-be.txt
deleted_hit:1541 DELETED-Falafel-fat-utf-8.txt
deleted_hit:1542 DELETED-Falafel-fat-utf-16-le.txt
deleted_hit:1543 DELETED-Falafel-fat-utf-16-be.txt
deleted_hit:1549 DELETED-Falafel-exfat-utf-8.txt
deleted_hit:1550 DELETED-Falafel-exfat-utf-16-le.txt
deleted_hit:1551 DELETED-Falafel-exfat-utf-16-be.txt
deleted_hit:1557 DELETED-Falafel-ntfs-utf-8.txt
deleted_hit:1558 DELETED-Falafel-ntfs-utf-16-le.txt
deleted_hit:1559 DELETED-Falafel-ntfs-utf-16-be.txt
deleted_hit:1925 DELETED-China-fat-utf-8.txt
deleted_hit:1926 DELETED-China-fat-utf-16-le.txt
deleted_hit:1927 DELETED-China-fat-utf-16-be.txt
deleted_hit:1933 DELETED-China-exfat-utf-8.txt
deleted_hit:1934 DELETED-China-exfat-utf-16-le.txt
deleted_hit:1935 DELETED-China-exfat-utf-16-be.txt
deleted_hit:1941 DELETED-China-ntfs-utf-8.txt
deleted_hit:1942 DELETED-China-ntfs-utf-16-le.txt
deleted_hit:1943 DELETED-China-ntfs-utf-16-be.txt
deleted_hit:2564 DELETED-Equine-fat-ascii.txt
deleted_hit:2565 DELETED-Equine-fat-utf-8.txt
deleted_hit:2566 DELETED-Equine-fat-utf-16-le.txt
deleted_hit:2567 DELETED-Equine-fat-utf-16-be.txt
deleted_hit:2572 DELETED-Equine-exfat-ascii.txt
deleted_hit:2573 DELETED-Equine-exfat-utf-8.txt
deleted_hit:2574 DELETED-Equine-exfat-utf-16-le.txt
deleted_hit:2575 DELETED-Equine-exfat-utf-16-be.txt
deleted_hit:2580 DELETED-Equine-ntfs-ascii.txt
deleted_hit:2581 DELETED-Equine-ntfs-utf-8.txt
deleted_hit:2582 DELETED-Equine-ntfs-utf-16-le.txt
deleted_hit:2583 DELETED-Equine-ntfs-utf-16-be.txt
unalloc_hit:1081 500528299 977594 Россия utf-8
unalloc_hit:1082 500524412 977586 Россия utf-16-le
unalloc_hit:1083 500520322 977578 Россия utf-16-be
unalloc_hit:1561 500335792 977218 فلافل utf-8
unalloc_hit:1562 500331910 977210 فلافل utf-16-le
unalloc_hit:1563 500327812 977202 فلافل utf-16-be
unalloc_hit:1945 500278447 977106 中國 utf-8
unalloc_hit:1946 500274582 977098 中國 utf-16-le
unalloc_hit:1947 500270454 977090 中國 utf-16-be
unalloc_hit:2584 500307123 977162 QuarterHorse utf-8
unalloc_hit:2585 500319430 977186 QuarterHorse utf-8
unalloc_hit:2586 500315518 977178 QuarterHorse utf-16-le
unalloc_hit:2587 500311412 977170 QuarterHorse utf-16-be
n_active_targets:39
n_active_hits:39
n_deleted_targets:39
n_deleted_hits:39
n_unalloc_targets:13
n_unalloc_hits:13
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.