I ran a summary report that produces the pie chart and lists out the various file types and number of associated files for each category. One of the categories is “unknown”…how do I find the specific files that are classified under this category within Autopsy?
The unknown category equates to the Mime Type of ‘application/octet-stream’. Do a search for that and it should get you started. The counts from your search and what the summary report says will not be a match since the summary report also remove -slack files and directories. But it will get you close to the number if you remove the -slack and directories.
Mark, thank you so much for your response and assistance!