Live Response

The immediate collection of data from a running system during an incident, a forensic process to preserve ephemeral evidence like active processes or network connections.