Disk Imaging

From ForensicsWiki
Revision as of 07:07, 21 July 2012 by Joachim Metz (Talk | contribs)

Jump to: navigation, search

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Disk imaging is the process of making a bit-by-bit copy of a disk. Imaging (in more general terms) can apply to anything that can be considered as a bit-stream, e.g. a physical or logical volumes, network streams, etc.

The disk image is stored in a Forensics image format

Also see

Forensics File Formats

External Links

Hash based imaging