Last Updated on March 22, 2022 by Admin 3
Assume that a computer was powered off when an information security professional arrived at a crime scene. Which of the following actions should be performed after the crime scene is isolated?
- Turn the computer on and collect volatile data
- Turn the computer on and collect network information
- Leave the computer off and prepare the computer for transportation to the laboratory
- Remove the hard drive, prepare it for transportation, and leave the hardware at the scene