Which of the following statement is not correct when dealing with a powered-on computer at the
crime scene?
A.
If the computer is switched off. power on the computer to take screenshot of the desktop
B.
If a computer is switched on and the screen is viewable, record the programs running on screen
and photograph the screen
C.
If a computer is on and the monitor shows some picture or screen saver, move the mouse
slowly without depressing any mouse button and take a photograph of the screen and record the
information displayed
D.
If a monitor is powered on and the display is blank, move the mouse slowly without depressing
any mouse button and take a photograph