digital forensics

n. a set of tools and methods for copying and analyzing all of the digital information from a physical medium in such a way that ensures the integrity and authenticity of the information are preserved


Originally developed by law enforcement and later adapted by archivists, the process in the context of archives typically involves the use of write blockers and software applications to conduct such activities as creating disk images, generating file manifests and checksums, extracting metadata, and characterizing files.