Which of the following is the MOST ACCURATE statement regarding what Shane should do when conducting a social media investigation of Larsen?

Shane, a Certified Fraud Examiner (CFE). is investigating Larsen. who is active on various social networking sites. Shane wants to search and extract information from Larson’s social media postings so that it can be used in court as evidence.

Which of the following is the MOST ACCURATE statement regarding what Shane should do when conducting a social media investigation of Larsen?
A . Shane should conduct a forensic shutdown of his computer to preserve the metadata in the social networking sites.
B. Shane should preserve the information from the social networking sites so that it can be established as authentic if used in court.
C. Shane should email himself the links of the postings so that he can retrieve them later.
D. Shane should preserve the information by saving the links of the postings in his ‘bookmarks"

Answer: B