1. INTRODUCTION
This manual is designed to help investigators safely and effectively handle Chromebook
devices during forensic investigations. Chromebooks differ significantly from traditional
systems, relying heavily on Google cloud services and containing strong local encryption
CHROMEBOOK FORENSICS PRE-SEIZURE
QUICK REFERENCE CARD
Use this guide before handling or seizing a Chromebook during an investigation. These
reminders help preserve volatile data and minimize evidence destruction._
Pre-Seizure Considerations
☐ Is the device powered ON? Avoid shutting it down.
☐ Photograph the screen, connected peripherals, and surroundings.
☐ Identify whether the user is logged in (visible account name?).
☐ Check for visible external storage (USB/SD card).
☐ Document the battery level and power connection status.
☐ Do not connect the device to any new network.
☐ Disable Wi-Fi (airplane mode or Faraday bag) to prevent sync or wipe.
☐ If the Chromebook is owned by a school/company, contact their IT department.
☐ Note any visible error messages, browser tabs, or pop-ups.
☐ Determine whether Developer Mode is active.
☐ Record time and location of seizure.
Triage Tip:
If the device is active and unlocked, photograph everything before attempting deeper
access. Avoid interaction unless you have proper legal authority and training.
Emory “Casey” Mullis
Criminal Investigator
Coweta County Sheriff’s Office
Emory Casey Mullis has been in Law Enforcement for over 20 years, encompassing both military and civilian roles. His journey with computers began with a Gateway 266 MHz, which was the pinnacle of consumer technology at the time, costing around $2000. Driven by pure curiosity, he disassembled his new computer right out of the box, much to the dismay of his wife, who insisted, "It better work when you put it back together!" This hands-on experience provided him with a foundational understanding of computer hardware and sparked his career as a Cyber Investigator.
Over the years, Casey has tackled numerous cyber cases, continually honing his skills and knowledge. He emphasizes the importance of questioning, challenging, and testing daily to stay abreast of the latest tools, software, and technologies. Despite the ongoing challenges, he thrives on the dynamic nature of cyber forensics and eagerly embraces every opportunity to learn and grow in this ever-evolving field.
check out stuff from one of our sponsors by clicking on the image
