During an incident response, which action is MOST critical to maintain the integrity of the evidence?
Using write blockers to prevent alteration of digital evidence
Securing physical evidence in a tamper-proof container
Documenting timestamps of all collected evidence
Ensuring the chain of custody is maintained