case:FT-SS-09-Frag
engine:Other_Physical
dataset:Windows
tool:X-Ways Forensic
version:19.6 SR-4 x64
tester:JRL
host:Hathor
date:2018-08-08 22:08:09
active_hit:6000 FRAG-fat-Sacramento-split-512.txt
n_active_targets:2
n_active_hits:1
n_deleted_targets:0
n_deleted_hits:0
n_unalloc_targets:0
n_unalloc_hits:0
comments:
Not finding the string "Washington" is the real expected result because the string is split across two file fragments and should be missed in a sector by sector physical search.