Before you shut the system down, you should check the running processes, as you might not be able to get back into the system. 

The possibility to collect ______ only presents itself during live investigations, as it is volatile and the content is lost when the power is turned off. 

In a forensic lab, to design the electrical layout, one can consider multiple computers on each circuit.

_______ is the process to ensure that the actual data on the hard drive that is to be examined is not compromised.