Glossary: Logs and Data Sources for Investigations

ARP (Address Resolution Protocol) cache

Also written: ARP cache

A short-lived table in memory that maps IP addresses to MAC addresses on the local network. It ranks high in the order of volatility, so it must be collected early.