Order of Volatility Flashcards
1
Q
1
A
CPU
Cache
Register components
2
Q
2
A
Routing tables
ARP cache
Process tables
Kernel statistics
3
Q
3
A
Live network connections/data flows
4
Q
4
A
RAM
5
Q
5
A
Temporary file system
pagefile/swap
6
Q
6
A
Data on hard disk
7
Q
7
A
Remotely logged data
8
Q
8
A
Data on archival media/backups