Computer Forensics Tools & Techniques Catalog
Forensic Functionality:Media Sanitization/Drive Re-use
Technical Parameters: Tool host OS / runtime environment Supported media types Fill value Supported wipe functions Multiple concurrent wipe operations Built-in hidden sector support / overwrites hidden sectors
Windows host-dependent (software tool) pre-defined, user selectable IDE/PATA Secure Erase wipe supported - limitted by number of available host computer connections, i.e., software tool built-in support for overwriting hidden sectors
Mac IDE/PATA user-definable DoD 5220-22M 7-pass wipe supported - 1 + concurrent wipe operations no support for hidden sectors
Linux SATA zero-fill Multi-pass wipe (pre-defined iteration count) no support for concurrent wipe operations
custom boot environment (e.g., bootable Linux thumb drive/CD/DVD) SCSI random fill Multi-pass wipe (iteration count user-definable)
standalone device SAS Single pass wipe
PCIe IEEE 2883
Mini PCIe CESGCPA-HigherLevel
USB 2 HMG Infosec Standard 5, Higher Standard
USB 3 (at native speeds) HMG Infosec Standard 5, Lower Standard
CompactFlash
SD card
NVMe
SSD-ATA
SSD-SCSI