The Effect of TRIM Function on Data Recovery from SSD Solid-State Drives

Abstract The need for developing computer forensics has emerged due to the growing number of crimes involving advanced digital systems for unauthorized access. In this regard, digital forensics will always be an advanced field as court cases involving computer technology become more widespread. This research paper presents a detailed study of the fundamental method of using SSD drives for computer forensics. Solid-state drives (SSDs) have replaced traditional spinning disk hard drives and have become the standard for storing data in devices. Today, SSD drives are widely used in desktop computers and laptops. SDDs use flash memory therefore they are highly reliable. This study analyzes the allocated and unallocated storage space on SSD with the TRIM function. One of the key problems is the built-in SSD data self-destruction mechanism, which makes it difficult to recover deleted files. In this research paper, we will consider a method that could reduce the impact of all the features described. The result of the study may contribute to the development of more reliable tools in forensic investigations.