Join Jungwoo Ryoo for an in-depth discussion in this video Understanding the role of write blockers in preserving data integrity, part of Learning Computer Forensics.
…In computer forensics, preserving the data integrity or…preserving the data itself is one of the top priorities.…In this video, we'll be exploring the role of write blockers in…preserving the data integrity in computer forensics situations.…Computer forensics rule number one is to not damage your evidence.…In this case, the evidence refers to your evidence drive.…The risk you're always running into is,…your operating system writing to the evidence drive.…
One of the countermeasures to keep this from happening is using a write blocker.…There are primarily two different types of write blockers.…The first type is hardware write blockers.…Usually these devices sit between an evidence drive and…a forensics workstation.…The second type is a software write blocker, and sometimes this software write…blocker is built into a computer forensic suite, like EnCase or ProDiscover.…
You could also accomplish the same write blocking effect…by changing the configuration of your operating system.…This is what a hardware write blocker looks like.…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 39s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.