Slack Space

Definition(s)

  • A form of residual data, slack space is the amount of on-disk file space from the end of the logical record information to the end of the physical disk record. Slack space can contain information soft-deleted from the record, information from prior records stored at the same physical location as current records, metadata fragments and other information useful for forensic analysis of computer systems.
  • Remnant data from deleted files still located in clusters on a hard drive.
  • The difference in empty bytes of the space that is allocated in clusters minus the actual size of the files. Also described as the data fragments stored randomly on a hard drive during the normal operation of a computer, or the residual data left on the hard drive after new data has overwritten some of the previously stored data.
  • The difference between the size of a file and the size of the various clusters where it is stored, since the file segments may be smaller than the clusters where they reside. May also refer to data fragments stored randomly on a hard drive during the normal operation of a computer or residual data left on a hard drive after new data has overwritten deleted files.

Notes

  1. Kroll Ontrack, Glossary of Termshttp://www.krollontrack.com/glossaryterms
  2. RenewData, Glossary (10/5/2005).
  3. Fios, E-Discovery Glossaryhttp://discoveryresources.org/01_electronic_discovery_glossary.html 
  4. RSI, Glossary.
  5. Legal Electronic Document Institute, Basic Principles of Automated Litigation Support (2005).
Print Friendly, PDF & Email