A DS Special Agent is investigating a complex visa fraud ring and seizes several electronic devices, including laptops and mobile phones, under a lawful search warrant. To preserve the integrity of the digital evidence for future prosecution, what is the most critical initial step?
-
A
Immediately power on the devices to perform a quick search for key documents before the battery dies.
-
B
Photograph the devices in their original location and document all serial numbers and connections.
-
C
Create a bit-for-bit forensic image of each device's storage media before conducting any analysis.
-
D
Disconnect the devices from all networks and place them in an evidence bag with a desiccant pack.