Role in the series
Canonical specialist volume for embedded, sensor, appliance and IoT-device evidence decisions.
Vol. 5 · In production
Embedded & IoT Devices
Device First Response & Forensic Acquisition
In production. This page describes the stable public scope of the volume. Internal drafting stages, card counts and architecture versions are intentionally not published as product status.
Home domain
Embedded and proprietary-purpose device state where the device itself, its storage, sensors, interfaces or constrained operating environment own the acquisition decision.
Cross-domain routing
Data already replicated onto a computer routes to Vol. 1; data already present on a phone routes to Vol. 2; provider-side cloud state to Vol. 4; network infrastructure to Vol. 3; cross-domain sequencing to Vol. 6.
Common grammar
Different domain. Same Evidence First method.
Each volume applies the same sequence — SCOPE, OBSERVE, OPTIONS, GAIN, LOSS, FOOTPRINT, RISK, REVERSIBILITY, DECIDE, DOCUMENT — while keeping the local decision in the volume that owns the evidence state directly changed by the action.