However, most of the research and trainings are focused on file system analysis.
Although there are some methods: eg Volatility, Volafox, Memoryze for Mac, Mac Memory Reader, Mac Lock Pick and Rekall, able to analyze mac memory, mac memory analysis is relatively strange.
Due to it's vast popularity, most people use We Chat for one or the other purposes, whether it is personal, or professional.
Chinese customers use Taobao and Wechat payments, but for the creation of the bank account they provide their own Chinese ID.
That becomes an issue for foreigners that plan to stay longer in China, and blocks them from all the benefits of cheap online shopping. For We Chat payment a foreigner can create account in some banks and enjoy the freedom that this creates.
These applications provide not only the smart phone version but also the desktop version.
Therefore, we could not ignore any possibility of evidence (either file system or memory) from a desktop machine.