In digital forensics, what does the term 'write-blocker' specifically refer to?

The term 'write-blocker' specifically refers to a tool that prevents data alteration during analysis. Write-blockers are essential in digital forensics as they ensure the integrity of data being examined. When investigators are acquiring data from storage devices, using a write-blocker allows them to access and copy the data without risking any changes to the original source. This preservation of the original data is critical for maintaining the validity of evidence in legal and investigative contexts.

In digital forensics, any modification to data could lead to questions about its integrity and authenticity, making it inadmissible in court. By employing a write-blocker, forensic analysts can assure that their examinations are both accurate and legally defensible, as the original data remains unaltered during the forensic process.

In contrast, the other options do not align with the definition and purpose of a write-blocker. Compressed backups do not prevent data alteration, disk cleanup addresses file management rather than forensic integrity, and features in data transfer cables do not play any role in safeguarding the original data during forensic analysis.