When conducing digital forensics, order of volatility is an important consideration during the collection of data after an incident. With order of volatility in mind, which type of memory should evidence be collected from first?
|Operations and Incident Response|
|Architecture and Design|
|Governance, Risk, and Compliance|
|Attacks, Threats, and Vulnerabilities|