Acquisition – Definition

The stage in a computer forensic investigation wherein the data involved is collected. Often the means used is a bit-by-bit copy or a forensic working image of the hard disk or other media in question