What should be recorded about nearby devices?¶

Nearby devices may be linked to the same account, network, user or activity even when they appear unrelated.

Evidential caution: that only the device showing the obvious evidence matters. A second phone, tablet, watch, router, camera, security key or storage device may hold complementary records or control access to the main system.

What this means¶

Consider whether one device may unlock, authenticate or control another. Smartwatches, hardware keys, phones and companion applications may support access to accounts or services.

Nearby network equipment may also matter. Routers, access points, switches and mobile hotspots can explain connectivity and may hold volatile logs.

Avoid switching on an inactive device merely to identify it. Powering it on may change data, trigger synchronisation or alert another user.

Where several devices are present, prioritise those that are live, unlocked, connected or at immediate risk of change. Seek specialist advice if the relationship between them is unclear.

What to check or do next¶

• Record what devices are present, where they are located and their physical relationship to one another. Include both wide scene photographs and closer images of identifiable items.
• Note whether nearby devices are powered on, charging, connected by cable, showing notifications or displaying network, Bluetooth or pairing indicators.
• Preserve visible makes, models, serial numbers, phone numbers, asset labels, device names and account identifiers where this can be done without unnecessary interaction.

Evidential limits¶

Do not assume ownership from location alone. A device on a desk may belong to another household member, colleague, visitor or organisation. Record what is known and what remains uncertain.