Forensic image

Definition
A forensic image is

{{Quote|an exact, sector-by-sector copy of a hard disk. Software capable of creating such copies of hard drives preserve deleted files, slack space, system files, and executable files and can be critical for later analysis of an incident. Best Practices for Victim Response and Reporting of Cyber Incidents, at 8 n.8.