A technician documents the findings of illegal material that was found on a workstation. Which of
the following should the technician do NEXT when storing the workstation?

A.
Set all users to administrators

B.
Destroy the hard drive

C.
Reimage the workstation and deploy

D.
Adhere to the chain of custody

Explanation:

http://www.computer-forensics.net/FAQs/what-is-a-chain-of-custody.html