case:FT-SS-08-Phone
engine:Indexed
dataset:Windows
tool:Autopsy
version:4.6
tester:JRL
host:Hathor
date:2018-08-14 10:08:42
active_hit:1312 LIVE-phone-1122-fat-ascii.txt
active_hit:1314 LIVE-phone-1122-exfat-ascii.txt
active_hit:1316 LIVE-phone-1122-ntfs-ascii.txt
active_hit:1328 LIVE-phone-9009-fat-ascii.txt
active_hit:1329 LIVE-phone-9009-fat-utf-8.txt
active_hit:1330 LIVE-phone-9009-fat-utf-16-le.txt
active_hit:1331 LIVE-phone-9009-fat-utf-16-be.txt
active_hit:1336 LIVE-phone-9009-exfat-ascii.txt
active_hit:1337 LIVE-phone-9009-exfat-utf-8.txt
active_hit:1338 LIVE-phone-9009-exfat-utf-16-le.txt
active_hit:1339 LIVE-phone-9009-exfat-utf-16-be.txt
active_hit:1344 LIVE-phone-9009-ntfs-ascii.txt
active_hit:1345 LIVE-phone-9009-ntfs-utf-8.txt
active_hit:1346 LIVE-phone-9009-ntfs-utf-16-le.txt
active_hit:1347 LIVE-phone-9009-ntfs-utf-16-be.txt
active_hit:1392 LIVE-phone-3270-fat-ascii.txt
active_hit:1394 LIVE-phone-3270-exfat-ascii.txt
active_hit:1396 LIVE-phone-3270-ntfs-ascii.txt
deleted_hit:1313 DELETED-phone-1122-fat-ascii.txt
deleted_hit:1315 DELETED-phone-1122-exfat-ascii.txt
deleted_hit:1317 DELETED-phone-1122-ntfs-ascii.txt
deleted_hit:1332 DELETED-phone-9009-fat-ascii.txt
deleted_hit:1333 DELETED-phone-9009-fat-utf-8.txt
deleted_hit:1334 DELETED-phone-9009-fat-utf-16-le.txt
deleted_hit:1335 DELETED-phone-9009-fat-utf-16-be.txt
deleted_hit:1340 DELETED-phone-9009-exfat-ascii.txt
deleted_hit:1341 DELETED-phone-9009-exfat-utf-8.txt
deleted_hit:1342 DELETED-phone-9009-exfat-utf-16-le.txt
deleted_hit:1343 DELETED-phone-9009-exfat-utf-16-be.txt
deleted_hit:1348 DELETED-phone-9009-ntfs-ascii.txt
deleted_hit:1349 DELETED-phone-9009-ntfs-utf-8.txt
deleted_hit:1350 DELETED-phone-9009-ntfs-utf-16-le.txt
deleted_hit:1351 DELETED-phone-9009-ntfs-utf-16-be.txt
deleted_hit:1393 DELETED-phone-3270-fat-ascii.txt
deleted_hit:1395 DELETED-phone-3270-exfat-ascii.txt
deleted_hit:1397 DELETED-phone-3270-ntfs-ascii.txt
unalloc_hit:1318 500737222 978002 800-555-1122 utf-8
unalloc_hit:1352 500745408 978018 301.555-9009 utf-8
unalloc_hit:1353 500757691 978042 301.555-9009 utf-8
unalloc_hit:1354 500753806 978034 301.555-9009 utf-16-le
unalloc_hit:1355 500749722 978026 301.555-9009 utf-16-be
unalloc_hit:1398 500741323 978010 202.555.3270 utf-8
n_active_targets:21
n_active_hits:18
n_deleted_targets:21
n_deleted_hits:18
n_unalloc_targets:7
n_unalloc_hits:6
comments:
Search target strings located in deleted files are reported twice, once from the deleted file and again as from unallocated storage.