Skip to main content

Posts

Featured

If your SSD was formatted, or you deleted files from your SSD, can they be recovered?

What is TRIM? Recovery depends almost entirely on something called TRIM. What is TRIM? According to Wikipedia, “[TRIM] allows an operating system to inform a solid-state drive (SSD) which blocks of data are no longer considered to be ‘in use’ and therefore can be erased internally.” Essentially, once you delete a file on an SSD (and even some SMR hard drives), TRIM says it’s okay to “overwrite” that data with zeros. Once “overwritten,” the data can not be recovered in the future. 🔌⚡️🚫 KEEP YOUR SSD POWERED OFF! According to this blog post by Ace Laboratory, “It takes from 10 minutes to 24 hours before [TRIM] will completely erase the data in the background.” ✅ If you did NOT have TRIM enabled on your SSD or operating system, there is a good chance some or all the files can be recovered. ❌ If you DID have TRIM enabled on your SSD and operating system (unless you turned off your SSD immediately after the deletion/format*), there is basically no chance any files can be recovered. The on...

Latest posts

MAGNET AXIOM 9.4.1.45125

Bypassing BitLocker Encryptio

Diamond Cut Forensics Audio

Cellebrite Physical Analyzer 7.70

CELLEBRITE UFED4PC 7.72