Unallocated Clusters – An Overview
Unallocated Clusters are areas of deleted data that have lost allocation within the file system.
When files are deleted from a computer or storage device, the data forming that file is not physically removed from the drive, instead, the entry within the Master File Table is altered to remove the allocation of that space on the device and the area then becomes available for newer files to be stored.
This means that the data forming the file is no longer allocated within the Master File Table and it becomes unallocated space.
Due to this, unallocated clusters often contain files or fragments of files that were previously live on the device, yet have been deleted and are no longer accessible to the normal user.
When data becomes unallocated, the file attributes, including the original file name, directory path and time/date stamps are lost and this makes it difficult to identify the point of creation or the origins of a specific file within unallocated clusters.
About Athena Forensics
For information on our digital forensic services or if you require any advice or assistance please contact a member of our team on 0330 123 4448 or via email on enquiries@athenaforensics.co.uk, further details are available on our contact us page.
Our client’s confidentiality is of the utmost importance. All correspondence is treated with discretion, from initial contact to the conclusion of any computer forensics investigation.
Our digital forensics experts are fully aware of the significance and importance of the information that they encounter and we have been accredited to ISO 9001 for 10 years.
Our forensic experts are all security cleared and we offer non-disclosure agreements if required. Our premises along with our security procedures have been inspected and approved by law enforcement agencies.
Athena Forensics do not disclose personal information to other companies or suppliers.
https://athenaforensics.co.uk/
https://athenaforensics.co.uk/service/computer-forensic-experts/
https://athenaforensics.co.uk/service/mobile-phone-forensic-experts/
