From the course: Cybersecurity Foundations: Computer Forensics

Unlock the full course today

Join today to access over 25,200 courses taught by industry experts.

Data acquisition approaches

Data acquisition approaches

- [Narrator] After taking essential precautions to preserve your evidence, you're finally ready to acquire your data. There are many ways of acquiring data in computer forensics. Static acquisition is one of the most basic and common data acquisition methods. Static acquisition retrieves data from non-volatile sources, such as a hard drive or USB drive. In a non-volatile source, data remains on the storage device after turning the power off. Live acquisition is becoming more necessary these days because of encryption. Live acquisition acquires data from a volatile source, such as main memory, also known as random access memory, or RAM. In a volatile source, data goes away from the storage device after it's turned off. In addition to static and live acquisition types, there is another way of acquisition, which is remote acquisition. Remote acquisition is done through a network connection and involves a client-server…

Contents