Forensic imaging preserves digital evidence on a computer, laptop, or server’s hard drive(s) with an exact copy of the original hard drive. The image file contains an algorithm that can prove the original and the copy are an exact, bit by bit, match. This is a smart and cost effective way of capturing evidence for use with a legal case or investigation that may arise immediately or at a later date. Imaging is the industry accepted standard for the preservation of computer based evidence. It is much different than a simple copy or a backup of your data as imaging is a non-invasive method of producing a complete sector by sector copy of an electronic storage device. The imaging process captures all data, including deleted information and data found in unallocated space.
PCI utilizes both hardware and software based solutions to create a sound forensic image. PCI can perform forensic imaging (also known as a forensic acquisition) and store the media in a secured location.
