http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/w/index.php?title=Cold_Boot_Attack_Defense&action=edit
<ref>
https://archive.li/NNvkO
</ref> If an adversary has immediate physical access to a computer, a [https://en.wikipedia.org/wiki/Cold_boot_attack cold boot attack] can be mounted.
Forensic experts have two main methods of extracting data from RAM: <ref name=coldboot_attack>
https://en.wikipedia.org/wiki/Cold_boot_attack
</ref>
* The running computer is cold-booted and a lightweight operating system is booted from a removable disk.