Notes - MCS
Computer Systems Forensic Analysis
Notes - MCS
Computer Systems Forensic Analysis
  • Computer Systems Forensic Analysis
  • Overview of Cybercrime
    • Cyberspace
    • Information Security Principles
    • Cybercrime vs. Computer Crime
    • Cybercrime slang
      • Images
    • Digital Evidence
  • Introduction to Digital Forensics
    • Concepts
    • Digital Forensic
    • Digital Investigation
    • Digital Crime Scene Investigation Methodology
    • Digital Evidence Handling
    • Ethical Code
  • Obtaining Evidences
    • Introduction
    • Boot Process
    • Secuere Boot Process
    • Windows Boot Process
    • Forensic Boot Tools
    • Bootable CD-ROMS - Linux Based
    • ADS
    • Forensic Sorting Tools
    • Forensic Acquisition
    • Dealing With Media Errors
    • Hidden Areas
    • Write Protection of Evidence Media
    • Storing Acquired Data
    • Image File Acquisition
    • Hash Values
  • Data Organization
    • Data Organization
    • File System
    • File Content
    • Endianness
    • Character Encoding
    • Data Structures
    • Date and Time
    • Encoding
  • Storage Devices
    • BIOS versus direct access
    • Hard Disk Geometry
    • Advanced Technology Attachment Interface
      • Device Configuration Overlay
    • Small Computer Systems Interface
    • NAND Flash memory
    • Level wearing
    • HDD vs SSD
    • Pen USB vs SSD Comparison
    • SSD Connectors, Interfaces, and Transfer Protocols
  • Volumes and Partitions
    • Concepts
    • Partition Tables
    • Sectors Addresses
    • Logical addresses
    • Volume Analysis
    • Types of Partition Tables
    • Common Partition Tables (MBR)
    • Boot Code
    • MBR examination
    • Removable Storage
    • Common Partition Tables (GPT)
    • Common Partition Tables (BSD)
    • Volumes’ Aggregation
  • RAM Analysis
    • RAM Analysis
    • General Computer Architecture
    • DMA – Direct Memory Access
    • Paging
    • Memory Acquisition
  • Mobile Forensics
    • Forensic value of phones
    • International Mobile Equipment Identifier
    • Potential Evidence
    • Forensics Dangers
    • Data Acquisition
    • Logical acquisition
    • Physical acquisition
    • Hashing
    • Software tools
  • Open Source INTelligence
    • Classical sources of information and intelligence
    • Evolution of OSINT - Open Sources Intelligence
    • Information sources
    • Closed source of information
    • Open sources
    • Information to Intelligence Cycle
    • Skills of the Analyst
    • Open Source Possibilities
    • Automated Processing
    • DarkNet
  • Documentation and Reporting
    • Introduction
    • Physical examination
    • Examining a computer
    • Media Examination
    • Examples of things to write in the report
    • Forensic Report
Powered by GitBook
On this page
  • M.2 Connector Interface
  • Peripheral Component Interconnect Express (PCIe) BUS
  • Apple SSD Proprietary Connectors
  1. Storage Devices

SSD Connectors, Interfaces, and Transfer Protocols

Connectors:

  • layer 1 – physical interface to connect devices. Examples: M.2, RJ45, ...

Link interfaces:

  • layer 2 – handles data encoding. Examples: PCIe and SATA.

Transport protocols:

  • layer 3 – handles data communication. Examples: NVMe, AHCI, and IDE.

M.2 – One connector, several transport protocols:

  • M.2 connector = SATA link interface + SATA transport protocol.

  • M.2 connector = PCIe link interface + AHCI transport protocol.

  • M.2 connector = PCIe link interface + NVMe transport protocol.

M.2 Connector Interface

M.2, formerly known as the Next Generation Form Factor (NGFF).

  • specification for internally mounted computer expansion cards.

  • replaces the mSATA standard.

  • more flexible physical specifications make it more suitable to:

    • solid-state storage.

    • particularly for use in small devices such as ultrabooks or tablets.

  • protocols:

    • link interface: PCI Express 3.0 (up to four lanes).

    • transport protocol: Non-Volatile Memory Express (NVMe) as the logical device interface for M.2 PCI Express SSDs.

      • NVMe is designed to fully utilize the capability of high-speed PCIe storage devices to perform many I/O operations in parallel.

    • Serial ATA 3.0 and USB 3.0 (a single logical port for both).

    • the manufacturer selects which interfaces are supported.

  • The M.2 connector has different keying notches:

    • to denote various purposes and capabilities of M.2 hosts (SSD, WiFi, 4G modem, . . . ).

    • to prevent plugging into feature-incompatible host connectors.

Peripheral Component Interconnect Express (PCIe) BUS

PCIe is a high-speed serial transfer interface standard.

M.2 connector supports up to four PCIe channels.

Apple SSD Proprietary Connectors

Last updated 1 year ago

Evolution of PCIe