​As a General Rule, What Should Be Done by Forensics

Multiple Choice

​As a general rule, what should be done by forensics experts when a suspect computer is seized in a powered-on state?

A) ​The power cable should be pulled.
B) ​The system should be shut down gracefully.
C) The power should be left on.
D) The decision should be left to the Digital Evidence First Responder (DEFR) .