Difference between pages "Cell Phone Forensics" and "Physical memory"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
m
 
Line 1: Line 1:
Cell Phone Forensics
+
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the actions of the computer can be analyzed.
 
+
1. If on, leave on. If off, leave off.
+
2. Collect and preserve other surrounding and related devices
+
3. Retain search warrant (if necessary - LE).
+
4. Return device to forensic lab if able.
+
5. Use forensically sound tools for processing
+
 
+
Notes:
+
Expand on 5 as to what to collect
+
ESN,  
+
IMEI,
+
Carrier,
+
Model Number,
+
Color, and
+
Other information related to Cell Phone and SIM Card
+

Revision as of 19:56, 2 May 2006

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the actions of the computer can be analyzed.

Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox