How do you preserve data taken from a computer?

Preserving relevant data or evidence is crucial when you prepare for a trial. This is done through forensic imaging, where we create an identical copy (forensic image) of the original hard drive. We always make two forensic copies: one copy is safely stored for evidence and the other copy is used for review purposes. The pristine copy will not be subject to any changes, but the review copy will be constantly updated and examined.