WEBVTT 00:00.080 --> 00:03.530 Solid state drives as briefly mentioned before. 00:03.770 --> 00:10.730 SSDs are non-volatile storage media and use Nand flash memory in an array to hold data. 00:11.300 --> 00:13.910 SSDs have been around for quite some time. 00:14.150 --> 00:19.220 However, mainstream use would have been greatly hampered by the high cost of the drive. 00:19.340 --> 00:31.670 Samsung first released a 32GB SSD with a Pata interface in 1996, followed by Sandisk's 32GB SSD but 00:31.670 --> 00:33.650 with its Sata interface. 00:33.860 --> 00:40.430 Although SSD drives use flash memory, the materials used are more high end than that found in flash 00:40.430 --> 00:46.340 drives, which makes it the much preferred option for use as a hard drive but again contributes to the 00:46.340 --> 00:47.420 very high cost. 00:47.450 --> 00:52.760 Some advantages of SSDs come from the fact that there are no moving parts in an SSD. 00:53.360 --> 01:00.450 No moving parts make the SSD more durable in the event of a fall or swift foot to the PC tower as there 01:00.450 --> 01:04.230 are no platters or actuator arms to be scratched or struck. 01:04.350 --> 01:10.620 Also, the faster reads slash write speeds and access times greatly reduce the time taken for the device 01:10.620 --> 01:16.620 to boot or start, and even gives an enhanced experience when using resource intensive software and 01:16.620 --> 01:17.250 games. 01:17.280 --> 01:23.880 As far as digital forensics goes, SSDs are still a relatively new technology that will be constantly 01:23.880 --> 01:26.130 improved upon for some time to come. 01:26.190 --> 01:31.890 It's important to remember that you are not dealing with a mechanical drive and that data on an SSD, 01:32.070 --> 01:38.280 much like a flash drive or memory card, can be lost or wiped within minutes or even seconds. 01:38.400 --> 01:45.270 Although traditional tools can be used to image and recover data from SSDs, I strongly suggest researching 01:45.270 --> 01:52.020 any SSD drive before performing any forensic activities to get a better understanding of its workings 01:52.020 --> 01:56.070 and complexities such as chipping and wear leveling algorithms. 01:56.100 --> 02:02.970 Take note of the pin layout interface for the SSD Connector left side, which connects to a PCI interface 02:02.970 --> 02:06.780 on the board instead of the usual Sata connectors. 02:06.990 --> 02:15.000 The connector in the preceding photo is an M2 non-volatile memory express Nvme SSD connector type. 02:15.000 --> 02:16.950 But there are other types as well. 02:17.070 --> 02:23.880 When performing forensic acquisitions on SSDs, which may require the use of a USB adapter, be sure 02:23.880 --> 02:26.190 you know which connector you are working with. 02:26.220 --> 02:29.520 Different SSD interface types include the following. 02:30.000 --> 02:34.410 Sata 3.0 up to six GB s bandwidth. 02:35.160 --> 02:40.410 Msata up to six GB slashes bandwidth found in older computers. 02:40.650 --> 02:45.450 M2 Sata up to 32 GB slashes bandwidth. 02:46.290 --> 02:48.870 M2 Nvme up to 32. 02:48.900 --> 02:56.190 GB slashes Bandwidth U2 up to 32 GB slashes bandwidth but not very common.