|
|
#1 |
|
Old Skooler Numba 1
![]() ![]() |
What is forensic write-block?
I am getting ready to purchase a firewire SATA drive adapter and they have one that is listed as a forensic write-block adapter as well. What does that mean? I can't seem to find an explanation online.
Thanks! FYI this is the adapter I am getting: http://www.wiebetech.com/products/satadock.php
__________________
~~~~~~~~~~~~ 3 days ~ Willie Nelson 3 days I dread to see arrive 3 days I hate to be alive 3 days filled with tears and sorrow yesterday today and tomorrow |
|
|
|
|
|
#2 |
|
Fleet Admiral
![]() ![]() ![]() ![]() ![]() ![]() |
That's for forensic studies of hard drives - so say you're in law enforcement (or even corporate security). You want to examine the contents of a HD, but even attaching a drive as a secondary device to a machine will write data to it (cache, temp, etc). Once data is written to it, it could potentially destroy or overwrite data you are looking for, or in the case of law enforcement, show signs that the drive was tampered with.
So the write blocker allows you to examine the drive without the possibility of writing any data to it. |
|
|
|
|
|
#3 |
|
Old Skooler Numba 1
![]() ![]() |
Cool thanks Jeffbx.
|
|
|
|