Shutting Down

• Shutting down a system using user space applications is not recommended due to risks from known trojans and self-destruct.

• Data preserved

  • Non-volatiles

• Data lost

  • Connection data
  • Machine state
  • Anything the intruder decides to destroy

• Risks

  • High risk of detection by intruder!
  • High risk of trojan!
  • High risk of self destruct damaging evidence!

Notes: