Physical Acquisition Definition

root@forensics:~$ open_glossary_term

PHYSICAL ACQUISITION

Physical acquisition attempts to collect a lower-level copy of device storage, where supported by the device, operating system, and lawful access.

// PROFESSIONAL_DEFINITION

Physical Acquisition

Physical acquisition attempts to collect a lower-level copy of device storage, where supported by the device, operating system, and lawful access.

It can matter when deleted data, low-level artifacts, or broader storage review is required, but it is not available for every modern device.

Keep the device available, charged, and unchanged so collection options can be evaluated.

Scroll to Top