Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes. This includes, but is not limited to, hard drives, floppy diskettes, CDs, PDAs, mobile phones, GPS, and all tape formats.

Related NICE Work Roles 1

Code Name Knowledge Skills Abilities Tasks
IN-FOR-002 [212] Cyber Defense Forensics Analyst 46 22 2 39