http://irongeek.com/i.php?page=security/thumbscrew-software-usb-write-bl
ocke
r

"If you want to go the cheapest route, use a linux system with auto mounting
disabled and buy some USB or Firewire drive enclosures. If you go this route
make sure you create a documented procedure for acquiring evidence and
follow it every time. You might even go as far as to record the history of
your shell commands as part of your digital case file."- warquel Re:
Forensic write blockers < Reply #1 on: July 05, 2007, 12:28:52 AM >
http://www.ethicalhacker.net/index.php?option=com_smf&Itemid=&topic=1405
.msg
5441

Hope this helps!

Kian
White Hat Group

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
Behalf Of Tom Yarrish
Sent: Tuesday, November 13, 2007 7:00 PM
To: forensics (at) securityfocus (dot) com [email concealed]
Subject: Converting an external hard drive enclosure into a write blocker?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey all,
I wanted to find out if there was a method to convert an external
hard drive enclosure into a "cheap" write blocker device? I'm not
looking for something to use from a forensic standpoint. Basically
if I want to put a hard drive into an enclosure and pull data/burn
data to DVD/whatever off of it, but prevent anything from being
written to the drive, I can do that.

Thanks ahead of time,
Tom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)

iD8DBQFHOmStZWzkfeDiTw4RAqcdAJ9FZ+QX3tnajnV4yaUPhK/R/xcqogCfV9Br
h+Fb956D4hQWWJ2roctoIT8=
=EOp6
-----END PGP SIGNATURE-----

[ reply ]