Running a keyword search uncovers text that Autopsy attributes to a word specific document. Autopsy gives me a full path to the file. When I export the file and open it it is a blank document. When I look at the document in a hex editor the text does not appear inside the document.
Can someone explain to me what is happening here? I thought the text was from an autosave of the word document that should be viewable from a hex editor, but it is not. Is it possible that Autopsy is attributing the text incorrectly, or more likely am I ignorant of what exactly Autopsy is showing me?