# Data Summary "Unknown" File Type Category

**URL:** <https://sleuthkit.discourse.group/t/data-summary-unknown-file-type-category/4311>\
**Category:** Autopsy Help\
**Created:** [April 5, 2024, 5:39pm UTC](https://sleuthkit.discourse.group/t/data-summary-unknown-file-type-category/4311 "2024-04-05T17:39:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![johnocollins](https://avatars.discourse-cdn.com/v4/letter/j/3be4f8/32.png) [@johnocollins](https://sleuthkit.discourse.group/u/johnocollins)\
**Post date:** [April 5, 2024, 5:39pm UTC](https://sleuthkit.discourse.group/t/data-summary-unknown-file-type-category/4311/1 "2024-04-05T17:39:08Z")

</div>

I ran a summary report that produces the pie chart and lists out the various file types and number of associated files for each category. One of the categories is “unknown”…how do I find the specific files that are classified under this category within Autopsy?

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [April 5, 2024, 8:50pm UTC](https://sleuthkit.discourse.group/t/data-summary-unknown-file-type-category/4311/2 "2024-04-05T20:50:07Z")

</div>

The unknown category equates to the Mime Type of ‘application/octet-stream’. Do a search for that and it should get you started. The counts from your search and what the summary report says will not be a match since the summary report also remove -slack files and directories. But it will get you close to the number if you remove the -slack and directories.

---

<div class="post-metadata">

**Author:** ![johnocollins](https://avatars.discourse-cdn.com/v4/letter/j/3be4f8/32.png) [@johnocollins](https://sleuthkit.discourse.group/u/johnocollins)\
**Post date:** [April 9, 2024, 1:25pm UTC](https://sleuthkit.discourse.group/t/data-summary-unknown-file-type-category/4311/3 "2024-04-09T13:25:32Z")

</div>

Mark, thank you so much for your response and assistance!
