Ssd: Security

Security and Forensics–Is Solid State Drive a Friend or a Foe?

But this wasn't an old hard drive. It was a high-end . ssd security

Leo knew that SSDs are "liars" by design. To prevent the memory cells from wearing out, a controller inside the drive constantly moves data around in the background—a process called . When you delete a file, the drive doesn't actually delete it; it just marks that space as "invalid" and moves on. Security and Forensics–Is Solid State Drive a Friend

This is a story about how the very features that make modern SSDs fast—like and background garbage collection —can become a security professional's biggest headache. The Phantom Files of Sector 42 Leo knew that SSDs are "liars" by design

The suspect had used a standard software wipe. To the operating system, the drive looked like a desert of zeros. However, Leo was looking for the area—a hidden reservoir of storage cells that the SSD controller uses for its own maintenance.

By bypassing the standard controller interface and talking directly to the NAND flash chips, Leo began to see the "ghosts" of the deleted files.