what device is used to prevent the system from recording data on an evidence disk?