Digital Forensics · Mobile · Insurance Claim · Threat Hunt
CASE #SGT-7723 · extracting evidence from a locked iPhone for a life insurance claim
After the death of a 17-year-old in a motorcycle accident, a 2.4M TL life insurance process opened. The adjuster requested the iPhone 14 Pro contents to distinguish 'accident, suicide or intentional death'. The device sat 11 hours on a muddy road at the scene, the screen is cracked, Face ID is unusable, the PIN is unknown because the owner died, and Activation Lock is active. The family applied to the DSET mobile forensics team. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown