It is widespread practice to: Use a bootable USB to make a forensic image. Remove the hard drive from the system to make a forensic image. Remove the hard drive from the system to make a forensic copy. CUse a bootable CD/DVD to make a forensic image. Remove the hard drive from the system to make a logical forensic image. As we start the investigation, to control the environment, we must: Use temperature-appropriate equipment. End the investigation. CWear latex gloves. Have absolute silence. Understand the environment.