What is the meaning of slack house in forensics?

slack space

Use of Tools for Digital Evidence Collection

By identifying these patterns and their relevance, you possibly can broaden your search to look for other files with these features. time period. Using the date and timestamps on recordsdata, which present when a file was created, final accessed, or modified, a time-frame could be established that exhibits when explicit events occurred. In addition to this, dates and instances stored in logs and other system recordsdata can present when a specific person logged on to a system or carried out some motion.

Therefore, the information solely fill a part of the onerous drive portion. Slack house can exist when a file’s measurement isn’t a multiple of the file system’s cluster size.

This unallocated house is what shows up as “free area” when you check your hard drive’s capacity. However, the contents of the file itself are left intact until a brand new file … Read More