No-Cost Detection of Endpoint Hard Drive Removal

Most organizations today cannot detect if an end user removes their laptop's hard drive, connects it externally, steals data, then reinstalls the drive. While solutions exist today, such as tamper-evident tape, tamper protection BIOS settings, or forensic tools to identify drive activity artifacts,...
By
Ryan A. Graham
November 19, 2025

All papers are copyrighted. No re-posting of papers is permitted

470x382_Research_Paper_gray.jpg