The biggest haunt of fugitive data on the disk drive of a Windows computer is called slack space. After a computer has been in use for a while and files are deleted, space once devoted to those deleted files gets recycled. What fills the recycled space is the data that was supposed to disappear.
Staggering quantities of deleted file fragments lodge in the space freed up by deletion, called unallocated space, and even in parts of the unallocated space reoccupied by new files, called slack space. Computer forensics specialists can examine a computer’s slack space, extract relevant material and, occasionally, locate the deleted data that clinches a case.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.
For questions call 1-877-256-2472 or contact us at [email protected]
