What is File Slack Space? File slack space occurs when a smaller file overwrites a larger one. File Slack space is the difference between the logical end of the file and the physical end of the area containing the file. A simple comparison would be when a one-hour film overwrites a two-hour film on a […]
Unallocated Clusters
Unallocated Clusters – An Overview Unallocated Clusters are areas of deleted data that have lost allocation within the file system. When files are deleted from a computer or storage device, the data forming that file is not physically removed from the drive, instead, the entry within the Master File Table is altered to remove the […]
System Volume Information
System Volume Information – An Overview System Volume Information consists of a ‘hidden’ Windows system directory that contains a backup within shadow copy files of the user and system stored files. The Microsoft Windows operating system automatically stores a backup of files present on the hard drive and places these files within a ‘hidden’ and […]
John McAfee and the EXIF Photograph Metadata
Why Police Sought to Arrest John McAfee In December 2012, John McAfee, who had famously built and sold his McAfee antivirus company in 1996, was wanted by Police in his country of residence, Belize as a person of interest in connection with the murder of his neighbour, Gregory Viant Faull who was found dead of […]
California v. Murray (Involuntary Manslaughter of Michael Jackson)
The Trial of Conrad Murray The trial of Conrad Murray, for the involuntary manslaughter of Michael Jackson on 25th June 2009 following his death from a massive overdose of Propofol, included evidence that had been obtained from his iPhone mobile phone by a DEA computer forensic examiner. The manslaughter of Michael Jackson trial began on […]
