Let's say a hard disk (A) is retrieved from a system to make a clone of it on hard disk (B) and use this clone for a forensic investigation.
Is SHA-1 secure enough to make sure that no other information will be added to the cloned hard disk that can incriminate a person?
What are the steps to consider in the process of cloning a hard drive to be at least 99% sure that forensic expertise is correct and no other evidence can be added in the process of the investigation. How to make sure that SHA1 hash of the drive A actually belongs to this drive and it's not a random hash that later can be referenced as the right one and used also in the cloned disk B.
Considering that drive A will not be sealed no more, can someone add files to both hard disks while preserving the same sha-1 value on both hard disks and use the added materials as evidence in court?