Which type of write-blocker typically alters interrupt-13 write functions?

A software write-blocker is designed to intercept and filter write commands at the software level. One of the primary functions it serves is to alter or block the interrupt-13 write functions, which are low-level operations that manage disk read/write requests. By manipulating these functions, a software write-blocker can effectively prevent any writing to the storage media while still allowing read access, thus ensuring the integrity of the data during the forensic investigation.

This capability is crucial because digital forensics relies heavily on preserving the original state of data. Any unintended modification can compromise the integrity of the evidence, potentially impacting legal proceedings. Software write-blockers can be particularly useful in situations where hardware solutions cannot be employed, or when dealing with systems that might not support external hardware interfaces.

The other types of write-blockers mentioned, like hardware write-blockers, typically operate at a more physical level, preventing write commands from ever reaching the storage device, rather than manipulating them at the software level. This key distinction is what makes the software write-blocker the correct option for this question.