Difference between revisions of "Talk:Solid State Drive (SSD) Forensics"

From ForensicsWiki
Jump to: navigation, search
m
m
 
Line 1: Line 1:
 
There was a question on this discussion page, let's answer it here.
 
There was a question on this discussion page, let's answer it here.
  
The original data is usually returned (for a "trimmed" block) when a drive doesn't support the DRAT feature or its variations (or when the support is broken). The original data can be "replaced" by null bytes (or something else) occasionally (e.g., a drive can start to return null bytes for a "trimmed" block after a write to another block).
+
The original data is usually returned (for a "trimmed" block) when a drive doesn't support the DRAT feature or its variants (or when the support is broken). The original data can be "replaced" by null bytes (or something else) occasionally (e.g., a drive can start to return null bytes for a "trimmed" block after a write to another block).
  
 
[[User:.FUF|.FUF]] ([[User talk:.FUF|talk]]) 17:50, 22 October 2018 (UTC)
 
[[User:.FUF|.FUF]] ([[User talk:.FUF|talk]]) 17:50, 22 October 2018 (UTC)

Latest revision as of 18:07, 22 October 2018

There was a question on this discussion page, let's answer it here.

The original data is usually returned (for a "trimmed" block) when a drive doesn't support the DRAT feature or its variants (or when the support is broken). The original data can be "replaced" by null bytes (or something else) occasionally (e.g., a drive can start to return null bytes for a "trimmed" block after a write to another block).

.FUF (talk) 17:50, 22 October 2018 (UTC)