Exhibit 2. Visualization of Disk Regions
From the article "New Approaches to Digital Evidence Acquisition and Analysis," October 7, 2018.
In this a visualization of disk regions generated by the Sifting Collectors diagnostic package, the green areas represent user-created files and the black areas represent portions of the media that have never been used.
Source: Martin Novak; Jonathan Grier; Daniel Gonzales, "New Approaches to Digital Evidence Acquisition and Analysis," October 7, 2018, nij.ojp.gov: