What should I photograph or capture first?¶

Capture the whole item in its setting, then the screen and transient details already visible. Do this before navigating, changing settings or moving connections.

Combine context with readable detail¶

A wide view can show which device displayed the information, where it was found, how equipment was arranged and what was connected. Close images can preserve usernames, identifiers, notifications, warnings, application states, timestamps, battery level and network indicators.

Include cables, chargers, removable storage, docks and nearby linked devices before anything is moved. Record the actual time independently of the device clock and retain any visible discrepancy.

An external photograph is often less intrusive than a device screenshot. Creating a screenshot can add a file, update storage, display a notification or produce an audit event. Body-worn video may preserve a continuous handling sequence, but targeted photographs are usually better for small text and exact identifiers.

Capture is not permission to explore¶

Do not swipe through screens, open menus or expand notifications merely to improve the image set. Those actions can alter read status, refresh applications or trigger synchronisation. Record what is present first; make a separate decision about any further interaction.

For each image or recording, identify who made it, when, what it depicts and whether anything changed beforehand. Note glare, obscured text or details that were not legible rather than guessing them.