Quick Reference

The process of copying the complete contents and structure of a data storage device, such as a computer hard drive, without altering the original in any way. Two images of the device are generally produced, one for evidential purposes and the second as a ‘working copy’ which is examined for evidential material. Where necessary, a properly verified and unaltered image can be produced in evidence in lieu of the original data storage device.

Subjects: Law.

Reference entries