Mobile Forensics: Logical vs Physical Acquisition
Differences between logical, file-system, and physical acquisitions on Android and iOS devices.
## Overview
Acquisition method dictates what evidence is recoverable. Physical acquisition reaches deleted artefacts but is increasingly blocked by hardware-backed encryption on modern devices.