A small law firm located in the Midwest has possibly been breached by a computer hacker looking to obtain
information on their clientele. The law firm does not have any on-site IT employees, but wants to search for
evidence of the breach themselves to prevent any possible media attention. Why would this not be
recommended?
A.
Searching for evidence themselves would not have any ill effects
B.
Searching could possibly crash the machine or device
C.
Searching creates cache files, which would hinder the investigation
D.
Searching can change date/time stamps