Joe a user upon arriving to work on Monday morning noticed several files were deleted from the system.
There were no records of any scheduled network outages or upgrades to the system. Joe notifies the
security department of the anomaly found and removes the system from the network. Which of the
following is the NEXT action that Joe should perform?

A.
Screenshots of systems

B.
Call the local police

C.
Perform a backup

D.
Capture system image