Task ID: T0048
Task Description: Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes. This includes, but is not limited to, hard drives, floppy diskettes, CDs, PDAs, mobile phones, GPS, and all tape formats.
Work Roles with this Task:
- Work Role ID: IN-FOR-001Work Role Description: Conducts detailed investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.Category: InvestigateSpecialty Area(s): Digital Forensics
- Work Role ID: IN-FOR-002Work Roles: Cyber Defense Forensics AnalystWork Role Description: Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.Category: InvestigateSpecialty Area(s): Digital Forensics