Case Buster

Practical guide

Preserve evidence without losing its context

A practical way to make a working inventory of files and messages while keeping originals intact.

Start with what you already have

When a situation is stressful, it is tempting to sort by what feels most persuasive. Begin instead with an inventory. List each source you control: a phone, email account, camera card, paper folder, or cloud drive. Record where it lives, who can access it, and whether it is likely to disappear soon. Do not access another person's account or device without permission. Your immediate goal is to avoid accidental loss, not to prove a conclusion.

Keep an untouched original when feasible and make a separate working copy for reading, annotating, or sharing. If you export a conversation, retain the original in its app as well as the export where possible. A screenshot may show only part of an exchange; note what comes before and after and whether attachments are missing. For paper records, keep the physical copy and make a legible scan with all pages, including backs and envelopes when relevant. Avoid cropping or rewriting the only copy.

Give every item a traceable entry

A small spreadsheet or notebook works. Use columns for an item ID, plain-language description, original location, date shown on the item, date you obtained it, format, and any gaps. Distinguish the date an event happened from the date a file was created or exported. Time zones and device clock settings can make these different. If you are uncertain, write “date uncertain” rather than guessing.

For example, in a wholly fictional scenario, an entry might read: “F-04; photo of a damaged bicycle lock; original on my phone; photographed April 8 at approximately 6 p.m.; copied to backup April 10; location inferred from nearby photos, not confirmed.” This describes provenance without claiming the photo establishes who damaged the lock. A second entry could point to the message that prompted you to take the photo; links between items are easier to evaluate when the items remain separate.

Back up carefully and protect access

A backup is not the same as a complete history. Some exports omit metadata, reactions, or deleted content. If an app gives multiple export options, compare them and note which you used. Never change dates or contents to make a document seem more convincing. If you have already highlighted or cropped something, label it as an annotated copy and retain the original.

Think about the privacy of other people in your materials. A document may contain addresses, medical information, or children's details. Before sending it to anyone, ask what they need to see and use an appropriate secure channel. Do not publish another person's sensitive information just to demonstrate a point.

Practical checklist

  • Copy important files to a second storage location you control; verify a few copies actually open.
  • Use clear filenames or IDs, but keep original filenames recorded in your inventory.
  • Protect accounts with unique passwords and multifactor authentication where available.
  • Record when and to whom you shared a copy; avoid sending sensitive material in public posts.
  • Keep a note of missing messages, damaged files, and any edits to working copies.

Limits and next step

How evidence can be collected, disclosed, or used depends on the jurisdiction and situation. In particular, do not assume that making an audio or video recording is lawful merely because you are present; seek local advice first. This guide does not decide authenticity, admissibility, privilege, or ownership. A lawyer or qualified local service can advise on those issues and on urgent preservation needs. Bring the inventory and originals or copies they request, not a claim that the inventory settles the matter.

Further reading

These are independent sources, not endorsements of Case Buster. Check current local rules with the relevant court or professional.

Browse all guides