Q95
Single choice
A security analyst performs forensic analysis of a user's computer. The analyst immediately orders the user to leave the computer powered on and not interact with it until further notice.
Which of the following best describes the reason for the analyst's orders?