unallocated space

Unallocated space is a data block on a hard drive or other magnetic media that the file system has marked as not in use.  Even though the file system has marked the space as unallocated, data can still be stored there from a previous file or intentionally as a mean to hide information.  A key step in any forensic investigation is to extract the unallocated space and analyze it with all relevant methods.