Don’t Bet the Farm on Slack Space

In this syndicated post, Craig Ball shines a light on the mechanics of file storage, contrasts unallocated clusters with slack space, and contemplates the diminishing value of slack space as a trove of useful forensic artifacts.

Continue reading

Written by Craig Ball

Craig Ball of New Orleans and Austin is a Texas trial lawyer, computer forensic examiner, law professor and noted authority on electronic evidence. He limits his practice to serving as a court-appointed special master and consultant in computer forensics and electronic discovery and has served as the Special Master or testifying expert in computer forensics and electronic discovery in some of the most challenging and celebrated cases in the U.S.

All author posts   |