(How) Can I
secure erase a single directory (or even file) on an SSD?
I'm returning a work laptop to my former employer that I was allowed to and did use for private matters. Normally colleagues just remove their data and not even their Windows user.
All my sensitive data is in my user folder, so I'd like to just
secure erase that.
The SSD is a
SanDisk SD6SB1m-128G-1006. SanDisk has a tool called
SanDisk SSD Toolkit or
SanDisk SSD Dashboard that does supports
(Note that SanDisk calls clearing the mapping table
secure erasing and calls the actual erasing of the blocks
sanitizing, while I call the latter
My goal is to actually erase the user folder's data.
- My OS is Win 10 1803 and the SSD is NTFS formatted.
- The disk is Bitlocker encrypted
- The computer is part of a windows domain
- The company heavily customized the Windows installation w/ logon scripts, registry hacks, group policies (which are synced however) and whatnot
- Creating system images is disabled
- I think I can boot from USB
I don't think it's worth the effort anyway, but could I create a disk image with a third party tool, which skips unassigned sectors/blocks?
Would restoring that image (after removing and recreating the BitLocker encryption) work if it skipped unassigned sectors/blocks?
Does Windows save critical information in unassigned blocks (and prevent drivers from overwriting it)? Or did only 90s copy protections do so?