adiamond wrote:
So, if I understand correctly, and I'm oversimplifying here a bit, assuming I want the general capabilities to capture 4 drives concurrently, I might purchase 4 write blockers (of the newest bus, feature type I can get -- like perhaps the new USB 3.0 host side write blocker from Digital Intelligence). Those do SATA and IDE drives, and if I want to be prepared to do others such as SAS, for example, I could indeed in theory use a drive adapter, but it would require some additional validation to make sure that the write blocker works properly with the suspect drive(s)?
By 'work with', is what is meant that there could be serious implications of forensic nature .. such as the write blocker not having been able to block writes to the host drive when used in conjunction with the host drive interface adapter?
Or, are just saying that it simply might not work at all, as in not recognized, for example?
Thank you (all) very much for your comments, btw. I'm finding all the info on this forum extremely helpful and interesting, I must admit.
I think you raise an important issue. I don't know that it should be a foregone conclusion that any given adapter will work reliably with a writeblocker. The professional models offer a wide variety of adapters and I think a belief that they have been tested is justified, though that doesn't completely let a user off the hook -- always best to test. However, I suppose it's possible that pairing a writeblocker (particularly an inexpensive model not expressly designed for forensic use) with any given adapter (e.g., SAS-SATA) may simply not work. I don't know.
One takeaway from this may be that instead of buying 4 write blockers, you might buy 1 and a SAS-SATA adapter and test it. If the combination works reliably, buy 3 more.
↧