Patent Document ID: 20100241977
Application ID: 12726553
Patent Status: 0

Claim One:
1. A method of obtaining a complete forensic image of an electronic storage media containing electronic data, the storage media being part of a computer system, the method comprising the steps of: (a) storing a data collection program on an external storage device; (b) sending the external storage device to a custodian of the electronic data, together with means for the custodian to easily return the external storage device; (c) requiring the custodian to connect the external storage device to a computer system containing the storage media; (d) requiring the custodian to use the data collection program to forensically collect the electronic data to create a complete forensic image of the storage media containing the electronic data; (e) authenticating the forensic image; and (f) preserving an exact copy of the forensic image without making changes to the forensic image.