What is the First Step required in preparing a computer for forensics investigation?
A.
Secure any relevant media
B.
Suspend automated document destruction and recycling policies that may pertain to any
relevant media or users at Issue
C.
Identify the type of data you are seeking, the Information you are looking for, and the urgency
level of the examination
D.
Do not turn the computer off or on, run any programs, or attempt to access data on a computer