An investigator discovers that a key piece of evidence was stored on a solid-state drive (SSD). Why is data recovery from SSDs more challenging than from traditional hard drives?
-
A
SSDs encrypt all data by default
-
B
The TRIM command causes the OS to immediately wipe deleted data blocks
-
C
SSDs use a proprietary file system unreadable by forensic tools
-
D
SSDs require specialized write blockers that are unavailable commercially