@az_gcfa Please can you share with me the full details of a software and hardware write blocker and how can i be able to make both for my final year project please
It is an interesting, if irrelevant ( as stated previously - this is an academic exercise), point.
If it comes to standing in court and being able to explain, step by step the functioning of the device, and being able to demonstrate that it meets the standards required ( for example by testing it against the NIST guidelines ), or saying that I implicitly trust someone else's implementation tested against the same standards, that I have no operational knowledge of, I don't know which would hold more water.
I suppose it depends upon your level of expertise as to the questions that are asked of you, my developing of such a device, would no doubt be more questionable than the presentation of such evidence in court by someone more experienced and well known than I. Even though the device in question may well be funtionally identical.
I think you're fast running into the practical reality that it's impossible to be an expert in everything and yet a digital forensics expert/examiner will often be expected to be an expert in everything (in the digital world).
This is where language becomes key, and a bad examiner would over-stress things with certainty (of which there isn't), but a better one would use more qualifying statements, to indicate the lack of certainty, and attempt to weight their emphasis fairly.
I like to think of the forensics practitioner as much like a GP in many ways. They're not the specialist surgeon, they don't develop the drugs, they don't develop the needles, they don't develop the chemicals or substances needed to make the drugs or needles, they don't have certainty about every disease/ailment, but they have a good broad knowledge allowing them to diagnose and treat people. You wouldn't expect them to know everything about every drug/tool they use, how they were made and engineered, about every disease/ailment to 100% certainty, and so on and so forth. They're still respected and perform a valuable function (and will on-occasion testify in court).