Skip to content

Glossary: Logs and Data Sources for Investigations

Slack space

The unused end of each storage block after a file's last byte, where old data can remain. Only a bit-level copy captures it.

Where the book teaches it

Related terms

Unallocated spaceBit-level copy