Forensic image definition
Forensic image means a copy of unaltered electronic information capturing all the ones and zeros and all the data contained on any and all devices, including but not limited to: Networking, analyzing, monitoring, storage to include all types of internal and external or data devices, routing, switching, and firewall devices, that are involved in any way with the process of an election. A forensic image must capture the deleted space on the drive and account for any recent formatting, deleted files or data, hidden files or data, and file or data fragments.
Forensic image means a forensically sound duplicate of the data of a hard drive or other electronic storage media which is created by a method that does not alter data on the drive being duplicated and which can be authenticated/verified as a true copy through the process of Verification. This duplicate contains a copy of every bit, byte and sector of the source drive, including unallocated space and slack space precisely as the data appears on the source drive relative to the other data on the drive;