Disk Scanning and Write Blocking

Understand the principles and tools behind write-blocking to ensure evidence remains unchanged during acquisition. You’ll also explore scanning techniques to detect hidden partitions, slack space, and non-standard volumes.

Key topics:

• Hardware vs software write blockers

• Detecting suspicious partitions

• BIOS vs UEFI imaging challenges

• Identifying bad sectors and handling errors