Difference between pages "Eraser" and "Slack"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(New page: {{Expand}} == Methodology == Eraser overwrites the filename for each deleted file with zeros up to the maximum filename length. == External Links == * [http://www.heidi.ie/eraser/ Offic...)
 
m
 
Line 1: Line 1:
 
{{Expand}}
 
{{Expand}}
  
== Methodology ==
+
== Definition ==
Eraser overwrites the filename for each deleted file with zeros up to the maximum filename length.
+
  
== External Links ==
+
In Computer Forensics ''slack'' refers to the bytes after the logical end of a file and the end of the cluster wherein the final byte of the valid file resides.
* [http://www.heidi.ie/eraser/ Official website]
+
  
[[Category:Anti-forensics tools]]
+
== Slack Types ==
 +
 
 +
=== RAM Slack ===
 +
 
 +
=== File Slack ===
 +
 
 +
== External Links ==

Revision as of 11:18, 3 March 2008

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Definition

In Computer Forensics slack refers to the bytes after the logical end of a file and the end of the cluster wherein the final byte of the valid file resides.

Slack Types

RAM Slack

File Slack

External Links