Disconnect computer from network. Try to dump RAM image. Image the drive, sign and optionally encrypt the contents, preferably file-by-file checksum and copy

Disconnect computer from network. Try to dump RAM image. Image the drive, sign and optionally encrypt the contents, preferably file-by-file checksum and copy to multiple secure locations. Copy of checksums in additional secure location. Get out of your house with your computer as soon as possible (as soon as you upload one or two images). Do not leave the computer, they will try to destroy or confiscate the evidence. Plan to store computer in secure location, preferably with 24/7 video monitoring and a heavy duty safe. Preserving the evidence is probably that important. Try to be in the company of someone you trust so they can act as a witness and can protect you from physical intimidation or attack. Assume phones are compromised including GPS on your mobile phone. Assume you are under physical surveillance. Assume your car is compromised. Relatives and close friends will be known to operatives. May be a good idea to spend 1-2 nights in a motel with a friend without anyone's cell phone paying cash until you secure copies of your data and get advice on what to do next.