Answer
Test flights, resets, software changes, and new log entries can alter or overwrite evidence from the event. Preserve relevant data and condition first unless a safety action requires otherwise.
Explanation
Post event troubleshooting should not destroy the record needed to understand the event.