Slack area on storage media

NTFSD
1

How does NTFS handle slack space?

  1. Does it always zero out the data in the last cluster or might it be
    junk?
  2. Any object reuse or ability to activate that capability?
  3. Will the data in the slack space be random data from memory or the last
    file in that cluster?
  4. Any special info about the slack space in files that only exist in the
    MFT?
2

> How does NTFS handle slack space?

  1. Does it always zero out the data in the last cluster or might it be
    junk?

IIRC this is always done by Cc, regardless of the filesystem in question.

  1. Any special info about the slack space in files that only exist in the
    MFT?

Resident files cannot have slack space by definition.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com