What is and Importa...
 
Notifications
Clear all

What is and Importance of "Free disk space"

5 Posts
4 Users
0 Reactions
968 Views
sudha
(@sudha)
Trusted Member
Joined: 16 years ago
Posts: 52
Topic starter  

Hi All,

Please add more clarity on "Free disk space" in FTK2.2.
I want to know if its a temp place where data gets stored(while reading the file)?? ?

In an SSN expression search i found some data on Free disk space and i'm not sure what to do with that data ?

Thanks in advance
Sudha


   
Quote
(@mscotgrove)
Prominent Member
Joined: 17 years ago
Posts: 940
 

Free space is any sector/cluster that is not used by a current file. When a file is deleted, the clusters it used to use becomes part of the free space.

Free space can be anywhere on the disk. Defrag routines try and put files together, and so after a defrag, most free space will be at the end of the disk.


   
ReplyQuote
(@seanmcl)
Honorable Member
Joined: 19 years ago
Posts: 700
 

To add to the above, free disk space can contain remnants of files previously stored on the disk or, in fact, complete files which have been deleted. These would include temporary files created by various programs including e-mail attachments, Microsoft Office documents, instant messaging files, web pages, cookies, etc.

To determine the significance of what you find in free space may require that you locate (if possible) the actual start of the file which may be in a different cluster than the data that you have found (the SSN data). It may not even be a contiguous cluster (if the file was fragmented), or the starting cluster may have been overwritten.

With US SSN searches you can get a lot of false positives so you should be prepared to establish that what you have found are, indeed, valid SSNs (there are various ways to do this). Once you have, you'll need to establish some reasonable hypothesis as to how these happened to end up on the computer and in free space.

That is where the fun begins.


   
ReplyQuote
sudha
(@sudha)
Trusted Member
Joined: 16 years ago
Posts: 52
Topic starter  

seanmcl wrote
With US SSN searches you can get a lot of false positives so you should be prepared to establish that what you have found are, indeed, valid SSNs (there are various ways to do this).

I used some of the sites like http//www.ssnvalidator.com/ to know if a found value is valid SSN or not…
Plz tell me if these sites are safe to use to and if so let me know the other sites as well.

Thanks in Advance
Sudha


   
ReplyQuote
(@bithead)
Noble Member
Joined: 20 years ago
Posts: 1206
 

I would suggest the Social Security dot gov website
Social Security Number Verification Service


   
ReplyQuote
Share: