It isn't that low risk, specialized police do cold boot attacks all the time. http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=10641927 hm there was a news article not that long ago where police were talking about internet drug scene using encryption, and how they are starting to train agents to get memory while it is still live, but I can't find it right now. They talked about several of their tactics for getting to encryption keys in memory though. www.ncjrs.gov/pdffiles1/nij/219941.pdf there is a LE guide for first responders on how to deal with memory in ways that maximize the chance of obtaining encryption keys