Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Write Blocker

Training Camp • Cybersecurity Glossary

What is Write Blocker?

A write blocker enables read-only forensic access to storage, preventing evidence modification to preserve integrity and chain of custody for court.

Glossary > Incident Response & Forensics > Write Blocker

Understanding Write Blocker

A write blocker is a forensic tool that permits read-only access to a storage device while preventing any modification of its contents, preserving the integrity of digital evidence. Hardware write blockers are physical devices inserted between the suspect drive and the analysis workstation, while software write blockers enforce read-only access at the operating system level. Their use is essential to maintaining chain of custody and ensuring evidence is admissible in court.

Learn More About Write Blocker:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →