root@forensics:~$ open_glossary_term
PHYSICAL ACQUISITION
Physical acquisition attempts to collect a lower-level copy of device storage, where supported by the device, operating system, and lawful access.
// PROFESSIONAL_DEFINITION
Physical Acquisition
Physical acquisition attempts to collect a lower-level copy of device storage, where supported by the device, operating system, and lawful access.
It can matter when deleted data, low-level artifacts, or broader storage review is required, but it is not available for every modern device.
Keep the device available, charged, and unchanged so collection options can be evaluated.
// RELATED_TERMS