Difference between pages "Cell Phone Forensics" and "Physical memory"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
m
 
Line 1: Line 1:
Cell Phone Forensics
+
'''Physical memory''' is the '''Random Access Memory''', or '''RAM''', used by the computer. By [[Tools:Memory_Imaging|imaging]] the physical memory, the actions of the computer can be analyzed.
 
+
1. If on, leave on. If off, leave off.
+
2. Collect and preserve other surrounding and related devices
+
3. Retain search warrant (if necessary - LE).
+
4. Return device to forensic lab if able.
+
5. Use forensically sound tools for processing
+
 
+
Notes:
+
Expand on 5 as to what to collect
+
ESN,  
+
IMEI,
+
Carrier,
+
Model Number,
+
Color, and
+
Other information related to Cell Phone and SIM Card
+

Revision as of 20:56, 2 May 2006

Physical memory is the Random Access Memory, or RAM, used by the computer. By imaging the physical memory, the actions of the computer can be analyzed.