Orphan Files with 4GB and caracter ^ in the names. #537
Unanswered
patrickdalla
asked this question in
Q&A
Replies: 1 comment 1 reply
-
It seems that these are false positive orphan files (there never had been such file). So sleuth recover non-printable characters in the name that are substituted with '^' and 4GB in the size field. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I've processed FAT filesystem, and it resulted in many files with "^^^^^^^^.^^^" and 4GB in size.
How does IPED/SleuthKit recover these orphan files?
Beta Was this translation helpful? Give feedback.
All reactions