Update Get-ForensicFileSlack.md doc

Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

MIT License

1.39k stars 274 forks source link

Update Get-ForensicFileSlack.md doc #164

Closed Sim4n6 closed 3 years ago

Sim4n6 commented 3 years ago

Volume slack is the partition where the file system resides, between the end of the file system and the end of the partition. File system slack is the end of the file system and does not have unused space allocated to any cluster.