Exhibit 2. Visualization of Disk Regions

From the article "New Approaches to Digital Evidence Acquisition and Analysis," October 7, 2018.

In this a visualization of disk regions generated by the Sifting Collectors diagnostic package, the green areas represent user-created files and the black areas represent portions of the media that have never been used.

Source: Martin Novak; Jonathan Grier; Daniel Gonzales, "New Approaches to Digital Evidence Acquisition and Analysis," October 7, 2018, nij.ojp.gov:
https://nij.ojp.gov/topics/articles/new-approaches-digital-evidence-acquisition-and-analysis