Troy is a computer forensics specialist. What must he do before analyzing the contents of a hard drive found at a crime scene? A.
Test it for trace evidence.
B.
Boot up the computer at the scene to examine its contents.
C.
Make a mirror image backup of the hard drive.
D.
Press ESC on the computer to halt a file-erasure program.
E.
Establish a protocol for handling the hard drive.