Step 1: Read the case study: investigating a "hacked" company computer located in the readings for this module.

Step 2: use the interview as your context.

Step 3: prepare an analysis which answer:

What needs to occur regarding evidence identification and acquisition to prepare the investigators for review of the digital evidence? In other words, what type of acquisition is best? What steps need to be followed to prepare for the search?