ECCouncil Exam Questions

Why would this not be recommended?

A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain information on their clientele. The law firm does not have any on-site IT employees, but wants to search for evidence of the breach themselves to prevent any possible media attention.

Why would this not be recommended?

A.
Searching for evidence themselves would not have any ill effects

B.
Searching could possibly crash the machine or device

C.
Searching creates cache files, which would hinder the investigation

D.
Searching can change date/time stamps