Forensic · Expert Witness · Incident Response
iPhone 15 Pro Pegasus-like spyware · journalist's device · NSO Group suspicion
An investigative journalist's iPhone 15 Pro shows 'excessive battery drain + phone overheating + background data traffic'. A court-approved forensic request. Suspicion of a Pegasus-like zero-click exploit (PassKit / BlastDoor bypass). A link to NSO Group? The Citizen Lab methodology is required. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown