Remote collection should not require a custodian to make forensic decisions. CompleteDiscovery uses a guided utility and examiner-defined scope to collect data available through a supported acquisition path, transfer it to an authorized workspace, and retain collection activity, hashes where the workflow supplies them, and custody detail.
A guided custodian experience
The team confirms authorization, device support, target categories, expected collection depth, and the communication plan. The custodian receives device-specific steps while the utility handles the configured acquisition and transfer. Supported targets may include phones, tablets, computers, and servers, but the available acquisition class and data categories vary by model, operating system, access, permissions, encryption, connector, and current release.
- Supported iPhone, iPad, Android, computer, and server workflows
- Available broader or targeted collection based on the approved scope and supported acquisition path
- Controlled transfer to an authorized GDF workspace
- Search, culling, export, available hashes, and collection activity records
The examiner remains accountable
Remote convenience does not replace source documentation. The record identifies the device, custodian, available access, collection method, start and finish, exceptions, and resulting package. Examiners reconcile what the workflow obtained against the intended scope before delivery.
Support depends on the device state
Collection depth varies with device model, operating system, encryption, permissions, account configuration, and supported acquisition method. Those limits and current product availability are confirmed before the custodian begins.