Device Isolation Workflow at a Scene
From identification to bagging in under 30 seconds — the field workflow that protects evidence and your case.
Quick Answer
Identify the device, place it powered into an RF-shielded bag, close the seal, log the bag serial against the exhibit reference. Aim for under 30 seconds from identification to sealed.
The 30-Second Window
Remote-wipe commands typically execute the moment the device next handshakes with a cell tower. Every additional second the device is unshielded is a window for evidence loss.
Identifying What to Bag
All powered electronic devices capable of network connectivity: phones, tablets, smartwatches, fitness trackers, laptops in S3/sleep, IoT devices, vehicle telematics dongles.
Bagging Procedure
Check the bag is undamaged. Open, insert device, fold the closure per manufacturer instructions, apply tamper-evident seal, record serial number on the exhibit label.
Documenting in the Pocketbook
Pocketbook entry must capture: time of seizure, time of seal, bag serial, exhibit reference, location, witnesses present. This becomes evidence in its own right.
Ask About This Article
Andover Forensics Assistant
Typically replies in a few seconds

