Isolating Devices to Preserve Evidence
In the chain of evidence, every step is critical: from finding a device or online account with digital data, to presenting digital evidence to a court so it makes the case for the prosecution. An early step that’s not only critical, but painfully easy to botch, is isolating a device from data or cellular access. By cutting off the device from its access “lifeline,” frontline officers and investigators can prevent existing digital evidence from changing, or even disappearing altogether.
