Skip to content

Glossary: Logs and Data Sources for Investigations

Bit-level copy

Also written: bit-for-bit copy, forensic image, disk image

A copy of an entire storage device, every bit from first to last, including deleted files, unallocated space and slack space. Alex's bit-level copy of Casey's USB drive found deleted customer records.

Where the book teaches it

Related terms

Write blockerddE01Slack spaceUnallocated spaceSystem image