CISSP All Domains Practice test 7

We have had a breach and an attacker gained access to some of our servers and workstations. We are planning to use the digital forensics from the time of the attack in a court of law. What should the evidence NOT be?