Glossary: Security Operations and Incident Response

ARP cache

Also written: Address Resolution Protocol cache

A system's in-memory table, kept by the Address Resolution Protocol, that matches nearby devices' IP addresses to their hardware (MAC) addresses. It is volatile evidence and sits near the top of the order of volatility.