Data Destruction Forensics- Part 2



For our water experiment, we received three hard drives, which we labeled, 10 MIN, 30 MIN and 60 MIN. We then imaged the drives and retrieved the hashes for each. We decided the time intervals that we are going to submerge them in water for, with intervals of: 10 minutes, 30 minutes, 1 hour, 12 hours, and 24 hours. The first drive used was labeled 10 MIN and submerged for 10 minutes in 5.68 liters of room temperature Burlington, VT tap water. After 10 minutes the drive was taken out, padded off with a towel, and connected to a test PC with a Forensic UltraDock V4 write blocker to be re-imaged. When connected, the drive failed to start spinning, and the write-blocker created a beeping noise for approximately two minutes. After it ceased beeping, it was quiet for a few minutes before the hard drive resumed making a scratching sound. Originally, the re-image was inaccurate due to user error, and we later discovered that the hard drive was no longer being recognized due to corroding of the circuit board.