What should be recorded about nearby devices?¶

Record all nearby digital devices, their state and their physical or visible relationship to the main item. Evidence, access and control may be distributed across several systems.

Look beyond the obvious screen¶

Phones, tablets, watches, routers, cameras, security keys and storage can share accounts or networks. One device may authenticate, unlock or control another, while routers and access points may hold short-lived connection records.

Use wide photographs to show location and proximity, then record visible make, model, serial, phone number, asset label, device name and account identifier. Note whether each item is on, charging, connected by cable, displaying notifications or showing network, Bluetooth or pairing indicators.

Prioritise devices that are live, unlocked, connected or at immediate risk of change. Do not switch on an inactive item simply to identify it; startup can alter data, connect to services or notify another user.

Location does not establish ownership¶

A device on a desk may belong to a colleague, visitor, organisation or household member. Record what a person says about ownership separately from the physical observation and technical identifiers.

Where relationships are unclear, preserve the scene and seek specialist support rather than testing pairings or accounts. Later provider, network and device evidence can determine whether the apparent links are genuine.