Glossary: Security Operations and Incident Response

Forensic image

Also written: forensic images, disk image, memory image

An exact copy of a disk or of memory that analysts examine instead of the original. A hash confirms that the copy matches the original.