When should I seek specialist support for a mobile-device enquiry?¶

Seek support early whenever handling, access, volatility or technical interpretation could materially change the evidence or close an opportunity.

Urgent device-state questions¶

An unlocked, powered, damaged, remotely connected or low-battery device may require immediate advice. Encryption, malware, rooting or jailbreaking, secure apps, unusual hardware and possible remote wiping also raise risk. Do not restart, update, unlock, reconnect or explore by habit while deciding what to preserve.

Specialist interpretation¶

App databases, backups, synchronisation, timestamps, location and conflicting device/provider records can require expert explanation even after extraction. Give the specialist the proposition, relevant period, accounts, numbers and suspected events. A focused question supports proportionate preservation and examination better than a request to extract everything.