When an investigator finds illegal or illicit material on a byod device, he/she must thoroughly understand the device's settings in order to accurately report and defend the examination findings?