The IT Law Wiki


32,068pages on
this wiki
Add New Page
Add New Page Talk0

Definition Edit

A write-blocker is

[a] device that allows investigators to examine media while preventing data writes from occurring on the subject media.[1]

Overview Edit

Hardware write-blockers are physically connected to the computer and the storage media being processed to prevent any writes to that media.

This allows forensic analysts to examine a suspect's computer hard drives or other digital media without altering data on that media to ensure that data are not added to the suspect’s storage media.

References Edit

  1. NIST Special Publication 800-72, Glossary, at 59.

Also on Fandom

Random Wiki