A full file system extraction is our best method of acquisition on current devices. This is the closest we get to a physical extraction. Here, you can see that we have access to application usage files, health, event logs and more. Your labs will really cement the difference in a full file system acquisition vs a traditional advanced logical acquisition.