Hardware and software Write Blockers

What are write blockers? Why would you choose a hardware write blocker over a software write blocker? In what situations would you use a software write blocker? Is evidence that has been acquired without a write blocker admissible in court? 


Write blockers are tools that permit read-only access to data storage devices without compromising the integrity of the data. A write blocker, when used properly, can guarantee the protection of the data chain of custody. 

I would choose a hardware write blocker because they are portable and hard to manipulate since hardware write blockers have write blocking software installed on a controller chip inside a portable physical device. Hardware write blockers provide built in interfaces to several storage's devices and can connect to other types of storage with adapters. Hardware devices that write block also provide visual indication of function through LED's and switches. This makes them easy to use and makes functionality clear to users. 

Software write blocker would be used for some special storage devices in cases where Hardware write blocker implementation would be hard or impossible. 

I say data with write blocker are admissible I court if other methods are used to preserves the integrity of the file metadata. 


Comments

Popular posts from this blog

Chain of Custody - OJ Simpson case

File Carving or Data Carving

Privacy issues associated with data mining