ForensicsWiki will continue to operate as it has before and will not be shutting down. There may be some minor outages as we transition the site to new hardware, but we will try to minimize this as much as possible. Thank you for your continued support of ForensicsWiki.

Difference between pages "Cell Phone Forensics" and "Physical memory"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
m
 
Line 1: Line 1:
Cell Phone Forensics
+
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the actions of the computer can be analyzed.
 
+
1. If on, leave on. If off, leave off.
+
2. Collect and preserve other surrounding and related devices
+
3. Retain search warrant (if necessary - LE).
+
4. Return device to forensic lab if able.
+
5. Use forensically sound tools for processing
+
 
+
Notes:
+
Expand on 5 as to what to collect
+
ESN,  
+
IMEI,
+
Carrier,
+
Model Number,
+
Color, and
+
Other information related to Cell Phone and SIM Card
+

Revision as of 00:56, 3 May 2006

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the actions of the computer can be analyzed.