Disk image

Creating a disk image is important in forensics prior to analyzing anything in order to ensure that disk information is not inadvertantly changed during analysis. By performing an original disk image and storing the original disk, it is possible to reproduce forensic test results with an exact reproduction of analysis methods.