Join Jungwoo Ryoo for an in-depth discussion in this video Using a software write blocker, part of Learning Computer Forensics.
…In this video we will enable write blocking on Windows 8.…So that the operating system is not able to…write to a USB drive connected to the machine.…To enable write blocking we have to run a program called Regedit or registry editor.…To run the program you have to use a key combination of your Windows key and…r pressed together and you'll get this run window.…Just type regedit, click on okay.…
When you get this dialog box, simply click on yes.…Now you see the Registry Editor window.…Choose HKEY_LOCAL_MACHINE.…Click on the arrow next to the HKEY_LOCAL_MACHINE folder.…Choose SYSTEM, click on the arrow next to the SYSTEM folder.…Choose CurrentControlSet, click on the arrow.…Next to the folder.…Choose control.…Right click on control.…Choose New.…
Select Key.…Now, changing a registry setting on your computer could be dangerous.…So, if you decide to follow what I'm…doing in this video you can do it at your own risk.…But be very careful.…Now type in storage device policies in this box and then click on the folder.…And then do a right-click on the folder, choose new and…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.