The phrase forensic collection often is associated with a bit-by-bit copy of a computers entire hard drive. This may be crucial in cases where we might expect authentication issues or where investigation of slack and fragmented space may be important.