Collection method aimed at capturing data at the storage level, potentially including deleted content and lower-level artifacts. Physical acquisitions can be more complete but may require specialized tooling and can be limited by encryption and device security features.
