Role in the series
Core volume for smartphone and tablet first response, preservation and acquisition decisions.
Vol. 2 · In production
Mobile First Response & Forensic Acquisition
Core volume for smartphone and tablet first response, preservation and acquisition decisions.
Device-local mobile state, including power, lock, radio and transient-session preservation together with mobile acquisition choice.
Provider-side cloud state routes to Vol. 4; network and carrier infrastructure to Vol. 3; directly acquired embedded or wearable devices to Vol. 5; cross-domain scene sequencing to Vol. 6.
Common grammar
Each volume applies the same sequence — SCOPE, OBSERVE, OPTIONS, GAIN, LOSS, FOOTPRINT, RISK, REVERSIBILITY, DECIDE, DOCUMENT — while keeping the local decision in the volume that owns the evidence state directly changed by the action.