Re: File Slack Space

From:
Date: 10/03/02 

Date: Thu, 03 Oct 2002 17:04:34 +1000

Mark wrote:
>
> Hi,
>
> I'm looking for a book that goes in to details about searching and
> analysing the file slack space on NTFS and FAT32 systems. A 'How to'
> would be spot on but even if it goes in to the theory involved that
> would be a great help.
>
> Cheers.

Why would you need a book?

All the information is well-documented in the Win32 API stuff.

It has been a while, and I don't have the code mear me, but there is a
Win32 API that returns the allocation size of the disk. It may return
data that you have to do a bit of arithmetic with, but its not
difficult.

So, once you have the allocation size (for example, 4K), then all you
have to do is traverse the file system, get the size of each file, and
work out how much is left out of the last 4K used.

Add up the numbers, and you have the total slack space.

        Cheers,
                Gary B-)

Quantcast