Which option best describes the purpose of incident response relation in a forensic investigation?

A. To support investigative support during an investigation. B. To perform marketing support without authorization. C. To replace all legal documentation. D. To avoid evidence documentation.