A method of generating a minimal forensic image (MFI) of a target dataset stored on a target device to reduce upload demand and facilitate faster initiation of digital forensic investigation, the method comprising: storing a set of MFI inclusion criteria in memory , the set of MFI inclusion criteria including a plurality of file types and upload criteria for each file type, the upload criteria including an upload format indicating a format in which a file of the respective file type is to be added to the MFI; automatically scanning the target dataset according to the set of MFI inclusion criteria, wherein the scanning includes, for a target file in the target dataset: checking a hash of the target file against a reference hash to determine whether to include the target file in the MFI; when the hash of the target file matches the reference hash, not including the target file in the MFI; and when the hash of the target file does not match the reference hash, including the target file in the MFI by: determining a file type identifier of the target file; determining the upload format of the target file from the MFI inclusion criteria using the file type identifier; storing a file representation of the target file in the minimal forensic image in the upload format; and initiating a data transfer of the MFI to a cloud server. storing a set of MFI inclusion criteria in memory , the set of MFI inclusion criteria including a plurality of file types and upload criteria for each file type, the upload criteria including an upload format indicating a format in which a file of the respective file type is to be added to the MFI; automatically scanning the target dataset according to the set of MFI inclusion criteria, wherein the scanning includes, for a target file in the target dataset: checking a hash of the target file against a reference hash to determine whether to include the target file in the MFI; when the hash of the target file matches the reference hash, not including the target file in the MFI; and when the hash of the target file does not match the reference hash, including the target file in the MFI by: determining a file type identifier of the target file; determining the upload format of the target file from the MFI inclusion criteria using the file type identifier; storing a file representation of the target file in the minimal forensic image in the upload format; and initiating a data transfer of the MFI to a cloud server. checking a hash of the target file against a reference hash to determine whether to include the target file in the MFI; when the hash of the target file matches the reference hash, not including the target file in the MFI; and when the hash of the target file does not match the reference hash, including the target file in the MFI by: determining a file type identifier of the target file; determining the upload format of the target file from the MFI inclusion criteria using the file type identifier; storing a file representation of the target file in the minimal forensic image in the upload format; and initiating a data transfer of the MFI to a cloud server. determining a file type identifier of the target file; determining the upload format of the target file from the MFI inclusion criteria using the file type identifier; storing a file representation of the target file in the minimal forensic image in the upload format; and initiating a data transfer of the MFI to a cloud server. <EOS>