Good Write Blocker Software Based??

Hi, I always use M2CFG, works a charm

http//www.m2cfg.com/downloads.htm - top link

Hope this helps

Stephen - Fields Associates

http//www.fieldsassociates.co.uk/

EnCase has an add-on that supports USB write blocking. (for a cost of course). Its called FastBloc-SE.

You could, of course, use Helix

Not sure if you want a software write blocker as hardware ones are expensive. If so how about a usb stick with a write protect toggle on the side?? )

Depending on what you want to do, USB writeblocking integrated in Win XP SP2 might be enough.

Aces Writeblocker works fine as well and is free for LE…

Microsoft Knowledgebase article How to disable the use of USB storage devices
(USB write blocking programs automate what this KB article shows you how to do manually.
You should read this to explain what write blocking software does.)
http//support.microsoft.com/kb/823732

AccessData whitepaper on write protecting the USB port in Windows XP (excellent read)
http//www.accessdata.com/media/en_US/print/papers/wp.USB_Write_Protect.en_us.pdf

Advanced Computer Examination Support for Law Enforcement
has a Windows based software write blocker to block writing to any local drive (HD, USB, CD, etc) and network drives. Free for law enforcement use from the FBI. There are restrictions to get an account and use software.
https://www.acesle.org/

Mid-Michigan Computer Forensics Group
http//www.m2cfg.com/usb_writeblock.htm

I have never tried these

NetWrix USB Blocker
http//www.netwrix.com/usb_blocker_freeware.html

Thumbscrew
http//www.irongeek.com/i.php?page=security/thumbscrew-software-usb-write-blocker

If you are using Microsoft 2000 or 2003 in a domain environment you can do this with a group policy.

An other USB write blocker is

USB WriteProtector
http//www.gaijin.at/dlusbwp.php

Yet another

USB Write Blocker Download Page

I think that they all try and accomplish the same thing using the registry. But when it the device has to do directly with a case I may need to testify about I usually go with a hardware write blocker.

gt