What term describes electronic evidence on computer storage media that is not visible to the average user?

The term that describes electronic evidence on computer storage media that is not visible to the average user is ambient data. This type of data often includes hidden files, remnants of deleted items, or information that exists in areas not typically accessed by standard user interfaces. Ambient data can provide insights into user activities and system usage that are not apparent during a regular examination, making it valuable for digital forensics and investigations.

In a forensic context, understanding ambient data allows investigators to uncover hidden or less conspicuous information that can be crucial for law enforcement or legal cases. This data can include timestamps, metadata, and fragments from previous files, all of which can help reconstruct events or usage patterns that the average user may not be able to access or recall, yet these remain stored on the device.

While defragmented data refers to how files are stored on a hard drive more efficiently, recovery data pertains to files that have been deleted but may still be retrievable. Forensic data, while relevant, encompasses a broader category that includes any data used in conducting forensic investigations beyond just what's ambient. Thus, ambient data is specifically tied to information that is not readily visible or accessible to typical users.