Digital Forensics Exams Aren't Linear

Current Situation. I'm just sitting here taking notes about my case notes from a recent iPhone exam. It's not uncommon for me to do this, especially when the case is huge and I've had to dig through lots of different artifacts. Now, you're wondering why my case notes are so disorganized. They're not. I was following the evidence. They're organized in that fashion. The problem is that looking for and finding the answer to one question can often leads to more questions - probably 3 to 5 more questions. I keep going down the rabbit hole looking for answers to the question. Sometimes I have to jump back up to the top once I've either found the answer or realize it was just a shiny object and should have never been followed. Knowing what doesn't relate to the case can be just as important as the things that do. Why do I do this? Why am I taking notes about my notes? I'm backing farther out and looking at the case from the 10,000 foot view. This helps me ...