slack space


Also found in: Dictionary, Wikipedia.

slack space

The space between the end of a file and the end of the disk cluster it is stored in. Also called "file slack," it occurs naturally because data rarely fill fixed storage locations exactly, and residual data occur when a smaller file is written into the same cluster as a previous larger file. In computer forensics, slack space is examined because it may contain meaningful data. See computer forensics and free space.
References in periodicals archive ?
In this case, there are both a slack space and unallocated space in the residual area because File B is not sufficiently large to occupy all three clusters.
It would have been nice, for instance, had Vacca gone step by step into what slack space on a hard drive is and how it can be identified and read.
The forensic examiner is most concerned with the section of slack space known as RAM slack, which contains information taken from primary storage at the time the file is saved to the hard drive.
Special software programs allow the forensic examiners to retrieve even deleted information from slack space and swap files.
Various software utilities can recover the earlier data from slack space; some even search the slack space for key words.