slack space


Also found in: Dictionary, Wikipedia.

slack space

The space between the end of a file and the end of the disk cluster it is stored in. Also called "file slack," it occurs naturally because data rarely fill fixed storage locations exactly, and residual data occur when a smaller file is written into the same cluster as a previous larger file. In computer forensics, slack space is examined because it may contain meaningful data. See computer forensics and free space.
Copyright © 1981-2019 by The Computer Language Company Inc. All Rights reserved. THIS DEFINITION IS FOR PERSONAL USE ONLY. All other reproduction is strictly prohibited without permission from the publisher.
References in periodicals archive ?
In this case, there are both a slack space and unallocated space in the residual area because File B is not sufficiently large to occupy all three clusters.
Fingerprints, hair, fibers, or DNA get left behind, as do digital clues lurking in slack space or swap files.
This version overcomes that 2.0 GB limit and the space can be used more efficiently with smaller cluster sizes that leave you with only a few MB of slack space rather than the 300+.
It would have been nice, for instance, had Vacca gone step by step into what slack space on a hard drive is and how it can be identified and read.
For example, information taken from the computer's primary storage when files are saved to the hard drive ends up in what is called "slack space." The forensic examiner is most concerned with the section of slack space known as RAM slack, which contains information taken from primary storage at the time the file is saved to the hard drive.