I was recently asked to provide an evidentiary hard drive backup for a law firm. At first, I agreed without hesitation but then I began to worry. I was simply going to use a program like Arconis True Image to plug in the drive to my rig and do a drive to drive copy. However, I began to wonder if this would truly provide a “forensic” copy of the drive given that by plugging it in to my computer I would be accessing the drive, however slightly. Is there a true blue forensic method or is a simple disc clone/image the same? Does anyone have a recommendation for a good all-around solution for this kind of operation?
