7 March 2013 Possibilities and modification of the forensic investigation process of solid-state drives
Author Affiliations +
Abstract
This paper addresses the possibilities of a forensic investigation of solid-state drives. The aim of this study is to clarify information gained via a forensic analysis of these media, and explain the differences to conventional forensic examinations of hard disk drives. Within each test design a series and a variety of hard- and software were used. An interesting result is that the built-in TRIM function of the SSD has an adverse affect in a forensic investigation.
© (2013) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Frank Irmler, Frank Irmler, Knut Kröger, Knut Kröger, Reiner Creutzburg, Reiner Creutzburg, } "Possibilities and modification of the forensic investigation process of solid-state drives", Proc. SPIE 8667, Multimedia Content and Mobile Devices, 866714 (7 March 2013); doi: 10.1117/12.2004028; https://doi.org/10.1117/12.2004028
PROCEEDINGS
10 PAGES


SHARE
Back to Top