case:FT-SS-07-RTL
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 10:08:13
active_hit:1473 LIVE-Couscous-fat-utf-8.txt
active_hit:1474 LIVE-Couscous-fat-utf-16-le.txt
active_hit:1475 LIVE-Couscous-fat-utf-16-be.txt
active_hit:1481 LIVE-Couscous-exfat-utf-8.txt
active_hit:1482 LIVE-Couscous-exfat-utf-16-le.txt
active_hit:1483 LIVE-Couscous-exfat-utf-16-be.txt
active_hit:1489 LIVE-Couscous-ntfs-utf-8.txt
active_hit:1490 LIVE-Couscous-ntfs-utf-16-le.txt
active_hit:1491 LIVE-Couscous-ntfs-utf-16-be.txt
deleted_hit:1477 DELETED-Couscous-fat-utf-8.txt
deleted_hit:1478 DELETED-Couscous-fat-utf-16-le.txt
deleted_hit:1479 DELETED-Couscous-fat-utf-16-be.txt
deleted_hit:1485 DELETED-Couscous-exfat-utf-8.txt
deleted_hit:1486 DELETED-Couscous-exfat-utf-16-le.txt
deleted_hit:1487 DELETED-Couscous-exfat-utf-16-be.txt
deleted_hit:1493 DELETED-Couscous-ntfs-utf-8.txt
deleted_hit:1494 DELETED-Couscous-ntfs-utf-16-le.txt
deleted_hit:1495 DELETED-Couscous-ntfs-utf-16-be.txt
unalloc_hit:1497 500303025 977154 الكسكس utf-8
unalloc_hit:1498 500299128 977146 الكسكس utf-16-le
unalloc_hit:1499 500295036 977138 الكسكس utf-16-be
n_active_targets:9
n_active_hits:9
n_deleted_targets:9
n_deleted_hits:9
n_unalloc_targets:3
n_unalloc_hits:3
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.