Forensic imaging is usually done at the sector level. A bit-stream copy of the entire media being imaged and not just a duplication of the data or file system is created. A write protection device or application that prevents contamination of the evidentiary media during the forensic imaging process is used to accomplish this task.
Computer Forensics Associates offers forensic imaging to private investigators, E-discovery firms, law enforcement, attorney’s and law firms so you can perform your own analysis and investigation. We are able to perform a “Live data acquisition” or schedule a pick up of the devices you need imaged, virtually anywhere in the US. Once the forensic image is complete it can be sent to you and the originals can be returned to your client.