Exam 312-49v10 topic 1 question 823 discussion

ECCouncil Official CHFI https://bookshelf.vitalsource.com/reader/books/9781635676969/ Module 02 Page 117-118 - First Response by Laboratory Forensics Staff The first response by laboratory forensic staff involves six stages. 1. Documenting the Electronic Crime Scene 2. Collecting Incident Information 3. Planning for Search and Seizure 4. Identifying and Collecting Electronic Evidence 5. Packaging Electronic Evidence 6. Transporting Electronic Evidence - If you agree: UPVOTE this post to add your vote to the community tally. If you disagree: discuss with citations Both actions crowdsource best answers.

C. Record observations about the current situation at the scene Explanation: Recording observations about the current situation at the scene is a critical first step. This ensures that the investigator documents the scene as it was found before any evidence is disturbed. This initial documentation can include noting the positions and conditions of all found items, any immediate visible evidence, and the overall environment. This step is essential for preserving the integrity of the scene and for future reference during the investigation.

Once the forensics team has arrived at the scene and unloaded their equipment, the first task is to try to identify any evidence. 1-) Survey the crime scene to recognize potential sources of evidence. 2-) Protect physical evidence or hidden fingerprints that may be found on keyboards, mice and other equipment. 3-) Find telephone lines that are connected to devices such as modems, and caller ID boxes, [ 4-) Observe the current situation at the scene, and record observations 5-) Maintain a search and seizure evidence log to document the details of all the electronic devices and media identified during the search for evidence 6-) Search the scene for secondary storage media such as diskettes, wireless hard disks, USB drives, tapes, etc.

according to ECCOUNCIL's the answer should be A A : secure the keyboard