An investigator needs to perform data acquisition from a storage media without altering its contents to maintain the integrity of the content. The approach adopted by the investigator relies upon the capacity of enabling read-only access to the storage media. Which tool should the investigator integrate into his/her procedures to accomplish this task?
To preserve the integrity of data on storage media during acquisition, the investigator should use a write blocker. A write blocker is designed to allow read-only access to the storage media, preventing any modification or alteration of the data while copying or analyzing it. This ensures that the original data remains intact and unaltered, which is critical for maintaining evidentiary integrity.
C. Write blocker A write blocker is a hardware or software tool used to prevent any writing or alteration to a storage media while acquiring data. This ensures that the integrity of the data is maintained during the acquisition process.