Skip to content

Flash Translation Layer (FTL)

Definition

Firmware inside the flash storage controller that maps logical block addresses to physical NAND blocks and implements wear levelling. Deleted files may persist in out-of-mapping physical blocks until the FTL recycles them, creating a window for forensic recovery.

Related terms

Baseband processor
A separate processor that manages all radio functions: cellular calls, SMS, and data connections. It runs its own real-time OS and holds...
eMMC (embedded MultiMediaCard)
A flash storage standard that packages NAND memory chips and a controller into one soldered module using a parallel interface. Common in...
Secure Enclave / Trusted Execution Environment (TEE)
A hardware-isolated execution environment within the SoC that stores device-unique encryption keys and handles cryptographic operations. The encryption key never leaves this...
System on Chip (SoC)
A single integrated circuit that combines the application processor, GPU, memory controller, image signal processor, and often the secure enclave. The SoC...
UFS (Universal Flash Storage)
A newer flash storage standard using a serial interface that allows simultaneous reads and writes. Faster than eMMC and common in flagship...

Explained in

  • Mobile Device Hardware ArchitectureFirmware inside the flash storage controller that maps logical block addresses to physical NAND blocks and implements wear levelling. Deleted files may persist...

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.