Unallocated space in Autopsy is represented as files.
Directly in a volume or in a $Unalloc folder
Named based on:
Unalloc_ParentID_StartByte_EndByte
| <<< Carving Process in Autopsy | Index | Adding a Disk Image >>> |
Unallocated space in Autopsy is represented as files.
Directly in a volume or in a $Unalloc folder
Named based on:
Unalloc_ParentID_StartByte_EndByte
| <<< Carving Process in Autopsy | Index | Adding a Disk Image >>> |