Tag Info

New answers tagged


When you take a forensic image, you can generally take either a physical or logical image of a drive. See this article for the differences. When you create a physical forensic image, your imager is reading the values of a drive bit by bit for the entire drive (unallocated space and all) whereas if you are to taking a logical image, the imager queries the ...

Top 50 recent answers are included