1
00:00:00,080 --> 00:00:03,530
Solid state drives as briefly mentioned before.

2
00:00:03,770 --> 00:00:10,730
SSDs are non-volatile storage media and use Nand flash memory in an array to hold data.

3
00:00:11,300 --> 00:00:13,910
SSDs have been around for quite some time.

4
00:00:14,150 --> 00:00:19,220
However, mainstream use would have been greatly hampered by the high cost of the drive.

5
00:00:19,340 --> 00:00:31,670
Samsung first released a 32GB SSD with a Pata interface in 1996, followed by Sandisk's 32GB SSD but

6
00:00:31,670 --> 00:00:33,650
with its Sata interface.

7
00:00:33,860 --> 00:00:40,430
Although SSD drives use flash memory, the materials used are more high end than that found in flash

8
00:00:40,430 --> 00:00:46,340
drives, which makes it the much preferred option for use as a hard drive but again contributes to the

9
00:00:46,340 --> 00:00:47,420
very high cost.

10
00:00:47,450 --> 00:00:52,760
Some advantages of SSDs come from the fact that there are no moving parts in an SSD.

11
00:00:53,360 --> 00:01:00,450
No moving parts make the SSD more durable in the event of a fall or swift foot to the PC tower as there

12
00:01:00,450 --> 00:01:04,230
are no platters or actuator arms to be scratched or struck.

13
00:01:04,350 --> 00:01:10,620
Also, the faster reads slash write speeds and access times greatly reduce the time taken for the device

14
00:01:10,620 --> 00:01:16,620
to boot or start, and even gives an enhanced experience when using resource intensive software and

15
00:01:16,620 --> 00:01:17,250
games.

16
00:01:17,280 --> 00:01:23,880
As far as digital forensics goes, SSDs are still a relatively new technology that will be constantly

17
00:01:23,880 --> 00:01:26,130
improved upon for some time to come.

18
00:01:26,190 --> 00:01:31,890
It's important to remember that you are not dealing with a mechanical drive and that data on an SSD,

19
00:01:32,070 --> 00:01:38,280
much like a flash drive or memory card, can be lost or wiped within minutes or even seconds.

20
00:01:38,400 --> 00:01:45,270
Although traditional tools can be used to image and recover data from SSDs, I strongly suggest researching

21
00:01:45,270 --> 00:01:52,020
any SSD drive before performing any forensic activities to get a better understanding of its workings

22
00:01:52,020 --> 00:01:56,070
and complexities such as chipping and wear leveling algorithms.

23
00:01:56,100 --> 00:02:02,970
Take note of the pin layout interface for the SSD Connector left side, which connects to a PCI interface

24
00:02:02,970 --> 00:02:06,780
on the board instead of the usual Sata connectors.

25
00:02:06,990 --> 00:02:15,000
The connector in the preceding photo is an M2 non-volatile memory express Nvme SSD connector type.

26
00:02:15,000 --> 00:02:16,950
But there are other types as well.

27
00:02:17,070 --> 00:02:23,880
When performing forensic acquisitions on SSDs, which may require the use of a USB adapter, be sure

28
00:02:23,880 --> 00:02:26,190
you know which connector you are working with.

29
00:02:26,220 --> 00:02:29,520
Different SSD interface types include the following.

30
00:02:30,000 --> 00:02:34,410
Sata 3.0 up to six GB s bandwidth.

31
00:02:35,160 --> 00:02:40,410
Msata up to six GB slashes bandwidth found in older computers.

32
00:02:40,650 --> 00:02:45,450
M2 Sata up to 32 GB slashes bandwidth.

33
00:02:46,290 --> 00:02:48,870
M2 Nvme up to 32.

34
00:02:48,900 --> 00:02:56,190
GB slashes Bandwidth U2 up to 32 GB slashes bandwidth but not very common.