Timestamp Analysis

The process of creating a complete, bit-by-bit copy or image of a storage device to preserve its contents for analysis and investigation without altering the original data.