Hard Disk Drives (HDDs) and Solid-State Drives (SSDs) are two types of
storage devices that are crucial information sources for forensic investigations. The
information gathered from storage devices should be located and safeguarded by the
investigator as evidence. As a result, the investigator must be familiar with the design
and operation of storage devices. Additionally, the file system is crucial since it
determines how data is distributed and stored on a device.
Keywords: Digital evidence, Data acquisition, Disk imaging, Data recovery, File system, HDD, Storage devices, SSD, System analysis.
