What is the second step when performing a search on a captured detainee?