Evidence must be accurately identified and accounted for. Non-electronic materials such as invoices, manuals, and packaging material may provide useful information about the device’s capabilities, the network used, account information, and unlocking codes for the PIN. Photographing the crime scene in conjunction with documenting a report on the state of each digital device and all computers encountered may be helpful in the investigation if questions arise later about the environment.
Create a record of all visible data. All digital devices, including mobile devices, which may store data, should be photographed, peripherals cables, power connectors, removable media, and connections. Avoid touching or contaminating the mobile device when photographing it and the environment where found. If the device’s display is in a viewable state, photograph the screen’s contents and, if necessary, record manually, capturing the time, service status, battery level, and other displayed icons.
Post your comment on this topic.