A user has reported that they witnessed a fellow coworker viewing inappropriate material on their workstation. Which of the following would a technician complete FIRST upon arrival, after the employee has left the area?

A.
Turn off the workstation

B.
Document all noticeable facts

C.
Format the hard drive

D.
Unplug the network cable