Question: A technician was able to stop a security attack on a user's computer. Which of the following actions should be performed FIRST when conducting the

A technician was able to stop a security attack on a user's computer.
Which of the following actions should be performed FIRST when conducting the subsequent forensic investigation?
answer
Stop all running processes.
Turn off the system.
Document what is on the screen.
Remove the hard drive.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!