How to zero out a storage disk using SDELETE in Windows
ฝัง
- เผยแพร่เมื่อ 3 ส.ค. 2024
- Today we show how to use sdelete from sysinternals to zero out a storage disk. To zero out a disk, we first need to delete all volumes on the disk. We show how to list volumes from the Windows command line, delete volumes using diskpart and zero out with sdelete.
Sdelete can also be used to securely delete files and other data in a partition.
Sysinternals sdelete: docs.microsoft.com/en-us/sysi...
bit.ly/2Ij9Ojc -- Subscribe for more videos and updates!
Support DFIR.Science on Patreon - / dfirscience
010001000100011001010011011000110110100101100101011011100110001101100101
Our Site → DFIR.Science
Subscribe → bit.ly/2Ij9Ojc
Support → / dfirscience
Contact Us → / dfirscience
DFIRScience RSS → DFIR.Science/feed.xml
Host: Joshua I. James → / jijames
010100110111010101100010011100110110001101110010011010010110001001100101
Tools to help manage your TH-cam Channel: www.tubebuddy.com/DFIRScience - วิทยาศาสตร์และเทคโนโลยี
Love that mic and clear instruction
You make fantastic content! Treasure trove of a channel.
This help me in most efficient way. Thanks!
Excellent! This is MOST helpful.
Your voice is so soothing :)
absolutely brilliant! thanks!!!!
Thanks alot man this was great
Very good and direct, congrats!
Thanks a lot!
Thanks sir
Hi Sr. I am using SDelete for wiping drives, it is ok if I clean the disk then
diskpart
select disk #
clean
Then use SDelete.exe -p 3 -z -c Disk#
it is ok to wipe the drive first and then clean the drive with SDelete on Raw format ?
I have built a solution on Powershell using SDelete that I allow me to wipe multiple drives at the same time. but I would like to know if Sdelete could be use in this way. Thanks
@DFIRScience If I run sdelete a few passes, do I still need to verify that everything has been zeroed out? Asking because I don't have winhex :)
is it okay to zeroing multiple disk at a time? will the sdelete perfectly do its task? thanks for the share
My Extrnal drive Doesnt Exist Now?
What To Do
hello ,i already learn this before from the other video ,i install it on C:\Sysinternals\Sdelete , so when i use it clean D drive ,i input C:\Sysinternals\Sdelete\Sdelete64 -C :D -P 5 ,it work normally ,but after a few months i not use ,when i am back to use it ,it's doesn't work , some time i will also use the defragler too ,same thing happen when i am back to use it after not use it for a few months ! it say you need to activate task organizer in services ,(i am not sure about this in english cause my pc display in other language) ,might be a system setting issue ! can you please help me to fix this?！
Difficult to say exactly what the issue might be. I would guess your path variable is getting reset after a few months, maybe with a Windows update.
So sdelete didn’t work and now my computer won’t boot up. Best part is Sdelete didn’t even get to do anything. It just said there was a volume and command prompt couldn’t find it.
What did you do to stop it from runing?
From terminal you can press ctrl+C that will stop any running command.
I'm using SDelete to clear free space on the drive, using the command 'sdelete -c c:'. How do I target an internal drive drive other than the C-Drive for this action? Let's imagine that this drive is called the E-Drive or the F-Drive.
You'll need to use the special device \\.\PHYSICALDISK# -> docs.microsoft.com/en-us/powershell/module/storage/get-physicaldisk?view=windowsserver2022-ps
@@DFIRScience Does SDelete legitimately not have the ability to target specific drives to clean other than the C drive. Surely, if I can target a drive to completely wipe, I can target a drive to simply clean.
*Note: SDelete securely deletes file data, but not file names located in free disk space.*
Right. sdelete will try to securely delete allocated file data locations. It will not clear the file system entries entirely. However, if you are running sdelete on a whole physical disk, it will wipe out the file system as well.
So I don't have an os installed cause for some reason it won't find it but I still want to wipe it out. How.
You can use a Linux Live CD/USB to boot the computer, and use built-in utilities to access and wipe the hard drive. This article is old, but it has the basic idea: www.howtogeek.com/howto/15037/use-an-ubuntu-live-cd-to-securely-wipe-your-pcs-hard-drive/
Does this work on SSD?
1 TB PCIe NVMe M.2 SSD, Windows 10 Home
Yup. SDELETE will delete whatever you point it at. The SSD has an internal controller that will actually remove the data.
@@DFIRScienceah alright. Also is the SDELETE harmful to the SSD in any way?
Like decrease performance or anything?
@@DFIRScience one more question. Can I use this same command or similar command to write Zeros to the hard disk without formatting it? I don't want to format as I have a lot of data. How can I get this done?
@@dristang Technically yes. The easiest thing to do is sdelete a file directly. Whole sections of the drive are a bit more complicated/dangerous.
@@DFIRScience ah I see.
Is the Cipher /w command same as SDELETE? Does the cipher command cause harm to the drive similarly to Sdelete? As SSD drive is different from an ordinary HDD
I'm trying to clear unused available space on the drive, so I'm not sure if SDELETE is the right tool for this purpose