order of volatility

what is volatile memory

a computer storage that temporarily holds data being used or processed.

should you power down your computer the contents will be erased.

What are the four levels of cache memory for a CPU

L1, L2, L3, and GPU

what is the order of volatility analysts should follow when collecting evidence

CPU registers and cache memory

RAM, Routing tables, ARP cache, process table, memory, and kernel statistics

temporary swap systems

Disk: Data on persistent mass storage ( HDD / SDD/ and flash drive)

Remote logging and monitoring data

Physical configuation and network topology ( things that rarely change )

Archival Media ( data that can be around for years on backups )

what forms of media constitue as archival media

backup tapes, and offsite storage

what does order of voltility mean

order things get modified by the quickest