Let me try to list down some of the things that a Incident response team will lose volatile data if they turn off the suspect's machine.
1) Logged in Users
2) TCP Connections
3) Running Processes
1) Logged in Users
2) TCP Connections
3) Running Processes
RSS Feed