Call: (888) 458-3222
What is a Bit Stream Image?
A bit-stream image is a sector-by-sector / bit-by-bit copy of a hard drive. A bit-stream image is actually a set of files that can be used to create an exact copy of a hard drive, preserving all latent data in addition to the files and directory structures. A bit-stream image can be read by the majority of the tools used by the Computer Forensics Examiner to analyze the hard drive such as Encase, FTK, ProDiscover and many others. By utilizing the bit-stream image, the Computer Forensics Examiner takes no risk of contaminating the original evidence.
The Computer Forensics Examiner creates the bit-stream image by attaching the original computer media to a write protection device that ensures no writes can take place to the original media while the bit-stream image is created.
Return to FAQ
Next Question: What is a Chain of Custody?
Center for Computer Forensics
21800 Melrose Ave
Southfield, MI 48075
This website is not intended to provide legal or professional advice. The site is merely a starting point to learn about the topics listed. While we attempt to maintain current, complete and accurate information we accept no responsibility for errors or omissions.