A computer system that is controlled by the investigator, has a known configuration and operating behaviour, is clean of viruses, and has installed upon it the necessary forensic software to copy the data from the source media.