The end of digital forensics?

Not quite

Tuesday, 08 March 2011

This recent paper by Graeme Bell and Richard Boddington of Perth's Murdoch University provide some valuable information for forensic examiners on how solid state disk (SSD) drives delete unused areas of the 'disk' independently from the operating systems or applications of the computers to which they're connected.

Some have suggested this will cause serious problems for computer forensic examiners, who will no longer be able to leverage data recovered from unallocated disk space. While I agree that in some cases this will be an issue, it's important to remember that electronic evidence can be derived from a wide range of data sources, many of which aren't effected by the behaviour of the SSD.

This article from the SMH has some interesting thoughts on the subject.

Comments (0)

Leave a comment

You are commenting as guest.

Cancel Submitting comment...

Contact Klein & Co.

Office: +61 (2) 9233 3400

Mobile: +61 407 614 143

Email: enquiries@kleinco.com.au


Our Clients Include