Live Forensics

Data that exists only in temporary storage and may be lost when a system is powered down or restarted, requiring immediate collection during cybersecurity forensics investigations.