#write blocker

Digital Forensics: Evidence Acquisition and Chain of Custody — Operational Guide

You just discovered a compromised server. Your first instinct: turn on the computer, check logs, maybe run an antivirus....