Slide 1 Lecture 3: Initial Assessment 6/4/2003 CSCE 590 Summer 2003 Slide 2 Collect the Most Volatile Evidence First Memory Swap space or page file Network status and connections…
