MARAFORENSICS
Discuss a collection
← All services

MOBILE SECURITY / TSCM SUPPORT

Mobile security.
A clearer picture.

For the people protecting private lives. MARA works with executive protection firms to examine iPhone backups for documented signs of spyware, malicious software and suspicious activity.

Discuss an assessment See the process
Executive protection teamsHigh-net-worth individualsPrivate client engagements

FROM BACKUP TO UNDERSTANDING

Follow the evidence.

Scroll through the assessment

MARA / MOBILE SECURITY01 / COLLECT
Illustrative workflow · no client data

COLLECT

Start with the evidence.

A guided, authorized collection creates an encrypted iPhone backup. The original is preserved while a working copy is prepared for examination.

Supported remote collection. A defined point in time.

COMPARE

Check for known warning signs.

Available app identifiers, profiles, process records and web addresses are compared with published malware and spyware indicators, including documented Pegasus indicators.

Known threats. Applicable records. Documented coverage.

INTERPRET

Put the traces in context.

Retained browser, WebKit and data-usage records can reveal useful leads. Matches and suspicious indicators are assessed in context; a stored link alone does not prove a connection or an infection.

Historical traces, with their limits made clear.

REPORT

Give the client a clear answer.

One report explains the findings in everyday language, lists the completed checks and identifies gaps. A technical appendix preserves the methods and supporting references.

Your branding. A readable summary. A technical record.

BEHIND YOUR CLIENT RELATIONSHIP

Your relationship.
Our forensic support.

Give your client a clear explanation of what was checked, what was found and what it means.

MARA supports the mobile-device part of a wider technical surveillance countermeasures (TSCM) engagement. Your protection team keeps the client relationship; we provide the supported collection, assessment and reporting workflow.

Remote collection can reduce the need to ship a phone or coordinate travel. The current assessment service covers supported iPhone backups; we confirm suitability for the device and concern.

Reports can carry your firm’s logo and colors, with an accessible client summary and a technical appendix in one document.

A DOCUMENTED ASSESSMENT

Useful answers.
Clear boundaries.

01

Research-backed checks

Public threat indicators from Amnesty International’s Security Lab, the Mobile Verification Toolkit and contributing research collections. Intelligence is checked weekly and retrieved fresh before each normal new assessment. The report records the snapshot actually used.

02

Focused handling

Automated processing decrypts and reads a working copy of the backup. Routine human review focuses on security findings, without browsing photo libraries, playing videos or reviewing unrelated personal conversations.

03

A path after a finding

A flagged record is validated in context. Where a concern is supported, the next steps can include preserving evidence, reducing exposure, securing accounts and planning appropriate device recovery.

A backup assessment is a point-in-time examination of available records. It does not establish that every form of compromise is absent. Historical network traces are incomplete; this service does not include live packet capture, continuous monitoring or physical premises sweeps.

FOR YOUR NEXT PRIVATE CLIENT ENGAGEMENT

Bring clarity to
the security conversation.

Tell us about your team, the device and the concern. We’ll help establish the right assessment scope and report format.

Discuss mobile security