You are working as an independent computer forensics investigator and receive a call from a systems administrator for a local school system requesting your assistance. One of the students at the local high school is suspected of downloading inappropriate images from the Internet to a PC in the Computer Lab. When you arrive at the school, the systems administrator hands you a hard drive and tells you that he made a imple PC in the Computer Lab.
What type of copy do you need to make to ensure that the evidence found is complete and admissible in future proceedings?
A.
Bit-stream copy
B.
Robust copy
C.
Full backup copy
D.
Incremental backup copy