One ongoing debate within the traditional computer forensics community has been how to respond to a running computer in the field. When you arrive on scene to a running computer, do you pull the plug, or do you conduct an orderly shutdown of the computer?
Learn more on the Magnet Forensics blog.