Used in computer forensic investigations and some electronic discovery investigations, a mirror image is a bit-by-bit copy of a computer hard drive that ensures the operating system is not altered during the forensic examination. May also be referred to as “disc mirroring,” or as a “forensic copy.” [1]

[1] Kroll Ontrack, Glossary of Terms, http://www.krollontrack.com/glossaryterms

Attributions
- EDRM (http://edrm.net)