You are a computer forensics analyst that works for the security department of the large multinational ACME Corporation. The corporation has discovered that some of their company's closely guarded future product plans have been leaked to a competitor. ACME believes that one or more of the employees in the research department must be responsible. Security have contacted law enforcement and they have agreed to assist security in raiding the research department to look for evidence.
a. What are five things that should be done prior to the raid and why?
b. What would be searching for and where would we look to find it?