A clone is an exact copy of the entire physical hard drive including all active and residual data and unallocated or slack space on the media.  Special hardware and software is used to ensure that the original media remains unchanged.  A cloned hard drive can be installed into the computer and the computer will re-boot and function as if the original drive was still installed.  A clone is used so that the "best evidence," the original hard drive, is protected.

The Center for Computer Forensics will maintain custody and control of the original hard drive in our fireproof media safe in our secured alarmed facility. A  chain-of-possession is created similar to those used by law enforcement.

 

- Return to FAQ -