Surveillance DVRs: Orderly Shutdown or Pulling the Plug?
One ongoing debate within the traditional computer forensics community has been how to respond to a running computer in the field. When you arrive on scene to a running computer, do you go straight to pulling the plug, or do you conduct an orderly shutdown of the computer?