Digital Forensics
Private Investigator
Learn More
Contact Us

Acquisition (Imaging)

In digital forensics, acquisition is the process of creating an exact bit-by-bit copy of the drive or device which is under examination. Other terms for acquisition include imaging and cloning. As a fail-safe against critical errors corrupting data and destroying evidence, all examinations are made on clones of the source media.

Post-mortem acquisition refers to imaging from an unpowered source, such as a hard drive, CD, DVD or Blu-ray disc.

Because any direct access to the original drive will cause information on the disc to be altered, a write blocker is used on the original and all examinations occur on the copy.

Digital forensics software creates a hash value for the copy, verifying it came from the source drive. Hashing allows digital forensic evidence to be admitted in many courts worldwide.

Live acquisition refers to imaging from an active device, like a smartphone or tablet, or the RAM on a computer.

Private Investigator Services  |  Digital Forensics  |  Find Out More  |  Contact

Call Us Today 414-377-8207


CONFIDENTIALITY DISCLAIMER All information obtained during the course of an investigation will remain confidential and solely between the investigator, Spindletop Investigations, LLC, and the client. However, private investigators are legally required to report any instances of child pornography or sexual crimes against children. Spindletop Investigations may choose to report other potentially serious crimes if they involve the risk of the loss of life. Spindletop Investigations will not pursue any unrelated leads outside the agreed upon scope of the investigation. As part of the consultation, Spindletop Investigations will work with the client in advance to fully define the scope of the investigation as well as all legal exceptions to our confidentiality agreement.

© Spindletop Investigations. Milwaukee, Wisconsin  |  Site map