Appendix 5 – Icon Key

Recover My Files icons sorted by Category:

DateFile date
DeviceA physical device, e.g. a hard drive
Description: C:\Users\Graham\AppData\Local\Temp\SNAGHTML294441e.PNG DeviceA logical device, e.g. C: drive.
FileA deleted file
FileA FAT “dot” directory entry
FileA FAT “double dot” directory entry
FileA system file
FileAn active file
FolderA deleted folder
Deleted itemsCategorize deleted items - File-system > Folder Tree > Category view
FolderAn active folder
Free spaceFree space in partition (Space inside a partition which is not in use)
Free spaceFree space on drive (Space on the physical drive which is not in use)
Description: C:\Users\Graham\AppData\Local\Temp\SNAGHTMLd3562e.PNG ImageA forensic image file
Description: C:\Users\Graham\AppData\Local\Temp\SNAGHTMLdddcac.PNG Image folderSelect an image from a folder
Image libraryAdd or select an image from the library
NavigationAn expandable branch (folder structure)
NavigationActive branch plate
NavigationInactive branch plate
PartitionA partition
PartitionAn active partition
UnallocatedUnallocated clusters on FATxx volume
UnallocatedUnallocated clusters on NTFS volume