Glossary: Logs and Data Sources for Investigations

System image

Also written: system images

A copy of a system's state, kept so it can be examined later without touching the original. The three kinds are a memory dump, a bit-level copy and a snapshot.