Let's start with always off.
If it is hot and you turn that device off,
you've just made a lot of work for the examiner who is
going to do that acquisition.
If it is a hot device and you turned it off,
make sure you know that passcode--
you are 100% sure of it to get into that device.
If it is in an off state, I still
recommend you acquire these devices as quickly as possible.
But if it's already turned off, take the SD card out
if it's an Android.
Acquire it with a write protection in place.
Acquire the SIM card separately.
And put everything into that device, power it up.
You're going to need the passcode in order
to acquire it.
If not, you're going to have to do some brute force.
And we'll talk about those techniques coming up
in the class.