Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Volatile data is evidence lost on power off, such as RAM, processes, and network connections, requiring live acquisition first per the order of volatility.
Volatile Data Definition: Volatile data is evidence lost on power off, such as RAM, processes, and network connections, requiring live acquisition first per the order of volatility.
Volatile data is digital evidence that exists only while a system is powered and is permanently lost when the device is shut down or rebooted. Examples include the contents of RAM, the process list, network connections and routing tables, cached credentials, encryption keys, and clipboard contents. Because of its fragility, volatile data must be captured first during live acquisition following the order of volatility, since it often holds the only trace of fileless malware or in-memory attacks.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →