Anti-Forensics
Clear Browser Artifacts
Clear Command History
Clear Operating System Logs
Delete User Account
Disk Wiping
File Deletion
File Encryption
Hide Artifacts
Log Tampering
Modify Windows Registry
Physical Destruction of Storage Media
Physical Removal of Disk Storage
Steganography
System Shutdown
Timestomping
Tripwires
Uninstalling Software
Use of a Virtual Machine
- ID: AF006
- Created: 25th May 2024
- Updated: 14th June 2024
- Contributor: The ITM Team
Disk Wiping
A subject destroys data and files on a system or systems, rendering stored data irrecoverable. This is achieved by overwriting files or data on local and remote drives.
Subsections
| ID | Name | Description |
|---|---|---|
| AF006.001 | Disk Content Wiping | A subject may partially or completely overwrite the contents of a storage device rendering the data irrecoverable through the storage interface. |
| AF006.002 | Disk Structure Wiping | A subject may attempt to render the system unable to boot by overwriting critical data located in structures such as the master boot record (MBR) or partition table. |