The EDRM Collection Standards Glossary is a glossary of terms defined as part of the EDRM Collection Standards.
When the forensic imaging process targets the entire physical drive or data storage media.
A RAW image file is a bit-by-bit copy of data on a disk or volume, without additions, deletions, or metadata. Originally used by dd, the RAW image format is supported by most computer forensic applications. 1
A process where individual custodians identify and copy potentially relevant files for discovery.