Things you'll lose after turning off suspect computer?

Let me try to list down some of the things that a Incident response team will lose volatile data if they turn off the suspect's machine.
1) Logged in Users
2) TCP Connections
​3) Running Processes