What is File Slack Space? File slack space occurs when a smaller file overwrites a larger one. File Slack space is the difference between the logical end of the file and the physical end of the area containing the file. A simple comparison would be when a one-hour film overwrites a two-hour film on a […]
Unallocated Clusters
Unallocated Clusters – An Overview Unallocated Clusters are areas of deleted data that have lost allocation within the file system. When files are deleted from a computer or storage device, the data forming that file is not physically removed from the drive, instead, the entry within the Master File Table is altered to remove the […]
System Volume Information
System Volume Information – An Overview System Volume Information consists of a ‘hidden’ Windows system directory that contains a backup within shadow copy files of the user and system stored files. The Microsoft Windows operating system automatically stores a backup of files present on the hard drive and places these files within a ‘hidden’ and […]
The 1 Billion Dollar Claim for Facebook Ownership
Background to Paul Ceglia Paul Ceglia was a wood pellet salesman who lived in Wellsville, New York State and alleged that he had written a contract in 2003 to hire Mark Zuckerberg, the Facebook CEO to carry out computer programming for his company, called Street Fax, after he had responded to an advert published by […]
Best Digital Forensic Practices & Standards
ACPO Guidelines for Digital Based Evidence ACPO/NPCC Good Practice Guide for Digital Evidence NIST Guidelines for Mobile Phone Examinations NIST Guidelines on Mobile Device Forensics 05-2014 Scientific Working Group on Digital Evidence on Digital Evidence (SWGDE) Scientific Working Group on Digital Evidence Best Practices for Collection of Damaged Mobile Devices 020816 Scientific Working Group on […]
