Definitions Edit

A write-blocker is

[a] device that allows investigators to examine media while preventing data writes from occurring on the subject media.[1]
[a] device that allows the acquisition of information on a drive without creating the possibility of accidentally damaging the drive.[2]

Overview Edit

Hardware write-blockers are physically connected to the computer and the storage media being processed to prevent any writes to that media.

This allows forensic analysts to examine a suspect's computer hard drives or other digital media without altering data on that media to ensure that data are not added to the suspect’s storage media.

References Edit

  1. NIST Special Publication 800-72, Glossary, at 59.
  2. ISACA, Cybersecurity Fundamentals Glossary (full-text).

Ad blocker interference detected!

Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.