Which of the following statements is incorrect related to acquiring electronic evidence at crime scene?

A.
Sample banners are used to record the system activities when used by the unauthorized user

B.
In warning banners, organizations give clear and unequivocal notice to intruders that by signing
onto the system they are expressly consenting to such monitoring

C.
The equipment is seized which is connected to the case, knowing the role of the computer
which will indicate what should be taken

D.
At the time of seizing process, you need to shut down the computer immediately