A forensic copy is an exact copy of the entire piece of media such as hard drive, [CD-ROM], [DVD-ROM], tape, [thumb drive], [ZIP disk], [JAZ disk], [REV disk], or other data storage device. It includes all active data, plus a copy of all the Unallocated Space on the media. It may also be called a Bit-for-bit copy, or an Image copy.
A forensic copy may be compressed and encrypted in order to ensure Authentication and to protect the Chain of Custody.
Add Comment