During first responder procedure you should follow all laws while collecting the evidence, and contact a computer forensic examiner as soon as possible