At first crime scene, preserving evidence with less or no tainted has always been the challenge. To solve this problem, our Desktop Triage is here to help. It captures both non-volatile and volatile data on operating Windows, keeping critical evidence such as login account and opened files. If the suspect has had just deleted the files, Desktop Triage could also attempt to retrieve the important data. The feature of screencapture further enforces the capability of preserving first-hand information. And via OCR, PSR and all features to complete evidence collection report could be generated to ensure evidence competence.