Physical Disk Access

A subject has physical access to the internal storage device of a target system, such as a hard disk drive (HDD) or solid-state drive (SSD). This capability may allow the subject to remove, replace, or connect the storage device to another system, enabling direct interaction with its contents independently of the original operating system.

Physical disk access may enable the subject to examine, copy, modify, or destroy stored information, potentially bypassing operating system-level access controls and monitoring. The extent of access depends on the device's configuration, physical security protections, and disk encryption, which may prevent unauthorized access to stored data.