Disk Imaging

Digital forensics researchers use low-level tools that capture all of the information that’s stored in a disk. This low-level process records not just of the currently available files but also any scraps that are left over from deleted files. The disk images are often stored for later analysis or use as evidence in any investigation.