官术网_书友最值得收藏!

  • Practical Mobile Forensics
  • Rohit Tamma Oleg Skulkin Heather Mahalik Satish Bommisetty
  • 98字
  • 2021-06-24 16:39:00

Physical acquisition

Physical acquisition of a mobile device is nothing but a bit-by-bit copy of the physical storage. With direct access to flash memory, information can be acquired from the device through physical extraction. Flash memory is non-volatile memory and is primarily used in memory cards and USB flash drives as solid-state storage. The process creates a bit-for-bit copy of an entire filesystem, similar to the approach taken in computer forensic investigations. Physical acquisition is able to acquire all of the data present on a device, including the deleted data, and access to unallocated space on most devices.

主站蜘蛛池模板: 宣恩县| 邹城市| 乌海市| 日喀则市| 老河口市| 华蓥市| 清水河县| 团风县| 柳林县| 怀化市| 旺苍县| 革吉县| 景宁| 河西区| 布尔津县| 永春县| 光山县| 东宁县| 新巴尔虎左旗| 沾益县| 泽库县| 望谟县| 晋江市| 安西县| 兴义市| 宁德市| 三江| 辉县市| 松阳县| 项城市| 昌江| 寿光市| 福贡县| 新民市| 横峰县| 长武县| 盖州市| 义马市| 威宁| 浦城县| 宜州市|