Glossary: Incident Response and Resilience

bit-level copy

Also written: forensic image, bit-by-bit copy

A copy of every bit of a drive, including empty space and the leftovers of deleted files. In the lab, the deleted 'new account' text was found only in the bit-level copy, not by a file copy.