In terms of supporting a forensic investigation, it is now imperative that managers, first-responders, etc., accomplish the following actions to the computer under investigation:
A.
Secure the area and shut-down the computer until investigators arrive
B.
Secure the area and attempt to maintain power until investigators arrive
C.
Immediately place hard drive and other components in an anti-static bag
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit