To ensure proper evidence collection, which of the following steps should be preformed FIRST?
A.
Take hashes from the live system
B.
Review logs
C.
Capture the system image
D.
Copy all compromised files
Explanation:
Get 50% Discount on All Your Purchases
at PrepAway.com - Latest Exam Questions
This is ONE TIME OFFER
50%