Download User Manual - Forensic Explorer

366 | P a g e
Appendix 8 - Icon Key
Navigation
Inactive branch plate
Partition
A partition
Partition
An active partition
Unallocated
Unallocated clusters
Disk View
The start sector of a file
Currently selected sector
One type overlays another
------------------------------------------------MBR/VBR (Red)
FAT 1 (Dark Violet)
FAT 2 (Web Violet)
$MFT (Dark Violet)
System files (Web Tomato)
$MFT resident file (the file overlays the $MFT)
Folder (Deep Sky Blue)
Allocated File (Corn Flower Blue)
Unallocated space (Lt Gray)
Deleted file (A deleted file overlays unallocated space)
Carved file (Dark Orange: Carved file overlays unallocated space)
Icons in Forensic Explorer include those supplied by:

Silk Icons: http://www.famfamfam.com/lab/icons/silk/; and

http://www.softicons.com
Copyright GetData Forensics Pty Ltd 2010 - 2015, All rights reserved.