slack space


Also found in: Dictionary, Wikipedia.

slack space

The space between the end of a file and the end of the disk cluster it is stored in. Also called "file slack," it occurs naturally because data rarely fill fixed storage locations exactly, and residual data occur when a smaller file is written into the same cluster as a previous larger file. In computer forensics, slack space is examined because it may contain meaningful data. See computer forensics and free space.
References in periodicals archive ?
WipeInfo wipes free and slack space and supports government specifications for secure deletion.
It also deepens Nuix's capacity for investigation and forensic analysis of data by recovering deleted files, processing slack space, indexing and viewing the Microsoft Windows registry and examining the binary structure of files in a hex viewer.
The forensic examiner is most concerned with the section of slack space known as RAM slack, which contains information taken from primary storage at the time the file is saved to the hard drive.
Special software programs allow the forensic examiners to retrieve even deleted information from slack space and swap files.
While partitions created with GDISK are indistinguishable from those created using FDISK, GDISK gives better disk space utilization, reduces slack space, allows hidden partitions and offers other features not provided in FDISK.
Various software utilities can recover the earlier data from slack space; some even search the slack space for key words.
The captured image contains all system software, networking software, associated drivers, software applications, configurations, and all the files, including deleted files, slack space, and data files as well as the CMOS settings for the system.
Tighter Compression: With Stac's SmartPack technology, normally wasted cluster level slack space is eliminated.