A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data.
Before powering the system off, Joe knows that he must collect the most volatile date first. Which of the
following is the correct order in which Joe should collect the data?
CPU cache, paging/swap files, RAM, remote logging data
RAM, CPU cache. Remote logging data, paging/swap files
Paging/swap files, CPU cache, RAM, remote logging data
CPU cache, RAM, paging/swap files, remote logging data