Q85
Single choice
A technician needs to track evidence for a forensic investigation on a Windows computer.
Which of the following describes this process?