Travel Secure: Erasing Your Digital Footprints on the Go

We all know that when files are deleted by the user, they are never truly removed. Either the full files or their remnants are still located somewhere in the unallocated space and the FAT or NTFS Master File Tables (MFT) contain records of their existence. So what do you do if you want to fully remove any evidence of deleted files but don't want to fully wipe the drive? 

ATRIO’s Travel Scrub feature was created to solve this problem. The Travel Scrub reads the device’s file system(s) and will use format specific methods to overwrite any remnants of deleted files and their records from the file system. Once the Travel Scrub function is selected, ATRIO will identify the partition on the device and will scrub accordingly by writing zeros in strategic places. For example on NTFS drives, it will overwrite the $LogFile and unused space on the MFT to ensure there aren’t any traces left of the files within the journal, in addition to fully wiping any files or partial files from the partition’s unallocated spaces. If there is a Windows partition, it will also wipe any swap space, unallocated space, and file slack from that partition. This way all traces of the file, physical or in the file system logs, are fully removed. 

So if you have to travel with your devices, be rest assured that ATRIO can safely sanitize the device so that your deleted data is permanently removed and won't fall into the wrong hands. 

If you want to learn more about this feature or other ATRIO capabilities, connect with our team! We’d be more than happy to answer any questions you may have!

Previous
Previous

Regripper 3.0: New Scalpel-Like Capabilities for Automated Registry Analysis

Next
Next

Revolutionizing Forensic Acquisitions: ATRIO 1.2.3 Unleashes Speed and Simplicity for Onsite Investigations