Cyber Security Interview Questions and Answers › Cyber Security
Why do forensics teams hash a disk image?
A disk image is an exact copy of a drive. A hash is its fingerprint. Same hash means same data. Courts accept evidence only if you can prove nobody changed it.
Read card text
What this card says
A disk image is an exact copy of a drive. A hash is its fingerprint. Same hash means same data. Courts accept evidence only if you can prove nobody changed it.
Learn more in the lesson: 28.4 Making and Verifying a Disk Image