The process used to obtain a bit by bit copy of data residing on the original electronic media; allows the investigator to review a duplicate of the original evidence while preserving that evidence
Source(s):
NISTIR 8006
from
Computer Forensics DFAM