This chapter will be covering physical data extraction using free and open source tools wherever possible. The majority of the material covered in this chapter will use the ADB methods previously discussed in this book. By the end of this chapter, the reader should be familiar with the following concepts:
What physical extraction means
What data to expect from physical extractions
Physical data extractions using the
dd
andnanddump
commandsRAM imaging and analysis
SD card acquisitions
JTAG and chip-off methods