Brain Dump

Slack Space

Tags
security

Refers to the left-over [see page 8, space] from a file when written to a cluster in a disk.

Slack space generally contains information from previously written files.

For example a 10MB file will probably be split into chunks of 10KB and stored in a continuous section of disk-space. The gaps between where one file ends and another begins is the [see page 8, [slack space](com3501-w05-windows-forensics)].

Links to this note