A security analyst has created an image of a drive from an incident. Which of the following describes what the analyst should do NEXT?