When an investigator finds a computer while serving a search warrant, the computer should be turned on and an inventory made of all files on the computer's hard drive.

Question

Quizplus · Accepted Answer

Turning on a computer can alter the data and potentially damage evidence. The correct procedure is to safely power down the computer if necessary and forensically image the hard drive for analysis.

When an Investigator Finds a Computer While Serving a Search