Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes. This includes, but is not limited to, hard drives, floppy diskettes, CD, PDA, mobile phones, GPS, and all tape formats.

Work roles that include this task

• CS-212 additional Cyber Defense Forensics Analyst
• EN-211 additional Forensics Analyst