Live systems are, in some cases, encountered during an investigation. However, the volatile data running in the computer’s memory could potentially contain important evidence. If the computer is powered off – the volatile data is lost. The volatile data could contain crucial information, such as encryption keys, passwords, network connections,…
