Attorney Digital Evidence Checklist

Identify sources

List devices, accounts, phone numbers, email addresses, cloud platforms, CCTV systems and storage media.

Record current state

Note whether devices are on or off, locked or unlocked, damaged, encrypted, connected or actively syncing.

Stop alteration

Instruct the client not to reset, update, delete, forward, factory-reset or continue unnecessary use.

Secure credentials

Record available passwords, PINs, account recovery information and authorised access arrangements securely.

Define scope

Record allegations, relevant dates, persons, transactions, keywords and expected outputs.

Document custody

Record who possessed each item, when it changed hands and how it was packaged or transported.