WinHex - Cluster analysis

[NiGhtMarEs0nWax]

Does anyone here know much about WinHex?

i was wondering how to analyse individual clusters? more specifically the cluster slack space. i was thinking on a cluster by cluster basis, rather than gathering slack space of an entire drive.

Thanks

[NiGhtMarEs0nWax]

** FIXED **

i managed to view the cluster tip by enabling "Open and search files incl. slack" option in the "Directory browser options" window.

on the pane to the right it shows the cluster size and the data file size,

you can deduce where the slack starts by counting the file size (in bytes) form the start of the cluster, anything outside the space allocated to the file is the slack.

Thanks.

[Rob Pomeroy]

I wish I knew what this all meant...   

[NiGhtMarEs0nWax]

http://www.explorerplusplus.com/blog/54-file-slack

there is some links at the bottom, winhex is a free tool that you can utilize to view clusters and a ton of other forensic functions.