Imaging and Logical Recovery

Once the device is stable, the next step is to create a low-risk copy (image) of the data. All further work happens on that image: repairing file systems, rebuilding partitions or RAID layouts, and, in many cases, performing detailed file repair and reconstruction at the data level.