Page 1

WEAROS & PAIREDDEVICES · A GUIDE FOR UK LAWYERS Wear OS and Android Paired-Device Forensics Watches, Tablets, Earbuds and Cars: The Wider Android Estate, Its Stronger Attribution and Its Many Makers COMPUTER FORENSICS LAB

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM PAIRED-DEVICE ESTATE ANALYSIS CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the phone rarely lives alone 03 What Android wearables and paired devices record 04 Stronger attribution: the device on the body 05 Many makers: acquiring across the Android estate 06 Interpretation and honest limits 07 Deployment: the wrist, the tablet and the wider estate 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary The headline point: an Android phone rarely lives alone, and its smartwatch, tablet, earbuds, car and other person more directly than a pocketed phone, and provides redundancy, because the same data is reachable on its own terms.

§ 02 · FIRST PRINCIPLES The problem in plain English: the phone rarely lives alone

§ 03 · WHATTHEYRECORD What Android wearables and paired devices record WATCH HEALTH / MIRRORED COMMS TABLET (ACCOUNT) CONNECTION PAIRED ESTATE MOTION RECORDS