ECCouncil Official CHFI
https://bookshelf.vitalsource.com/reader/books/9781635676969/
Module 04 Page 351-352
"The order of volatility for a typical computing system as per the RFC 3227 Guidelines for Evidence Collection and Archiving is as follows:
1. Registers, processor cache
2. Routing table, process table, kernel statistics, and memory
3. Temporary file systems
4. Disk or other storage media
5. Remote logging and monitoring data related to the target system
6. Physical configuration and network topology
7. Archival media"
-----
If you agree: UPVOTE this post to add your vote to the community tally.
If you disagree: discuss with citations
Both actions crowdsource best answers.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
044f354
1 week ago