A crime scene involves a powered on computer. The first responders should...

a$.$ Dump the memory, then power off the computer in any case

b$.$ Power off the computer in any case and report it

c$.$ It does not really matter if they power off the computer, because the data remains in the hard drive

d$.$ Avoid as much as possible powering off the computer, but report it if done anyway