we will give two method aligned with NIST 800-80
document for NIST :
- clear - normal wipining of drives ; wipe ; verification ; certificate
- purge - sanitization of all hidden HPA / DCO drives if present ; wipe ; verification ; certificate
How do we serve this:
- bootable iso image can be used in usb drives.
- no other option as using it locally will result in software deletion itself.
[x] System detect and disk partitions [] What type , HDD / SSD / SATA..
Windows : [] all clean method in diskpart for normal wipe
- SSD have encrytion which can't be normally wiped. uses AES encrytion something.
- so cryptographic erase has to be done.
- OS will be kept as a option only in clear wipe method. not in purge.
- important part of the NIST 800-88 compliance
- what is it? make sure the wipe is successfully?
can be done by rechecking the drives by searching or a simple lookup of logical tables.
[] TASKS
[] initial search (done) -> wipe -> verify -> certificate [] make iso image , burn on usb drive -> try booting the os on vm [] deep_search -> list hidden sectors -> wipe -> verify -> certificates.