Ravi Sir's Cyber Security Cards › Revision Cards
Making and Verifying a Disk Image
Making and Verifying a Disk Image A disk image is a bit-for-bit copy of a drive, used so you never touch the original. In real work, connect the evidence disk through a write blocker so imaging can’t change it. For practice, image your own spare USB stick. Always compute a hash before and after, and
Read card text
What this card says
What it is
A disk image is a bit-for-bit copy of a drive, used so you never touch the original.
How it works
In real work, connect the evidence disk through a write blocker so imaging can’t change it.
For practice, image your own spare USB stick.
Why it matters for security
Always compute a hash before and after, and check they match.
Court cases have been lost over broken hash chains.
Learn more in the lesson: 28.4 Making and Verifying a Disk Image