lost or stolen device
post-recovery triage: what did the finder do, what was accessed, was the device wiped or imaged.
a guided path, not automation — each step opens a tool you run yourself; nothing uploads. progress is saved only in this browser.
wraps the lost device — recovery triage preset — drop pairing records + reset/wipe artifacts → timeline of finder activity → report
guided steps
- ios pairing record forensic analyzer
iOS pairing records — who connected while the device was missing
- mobile factory reset evidence artifact detector
detect factory reset performed while device was out of owner's possession
- mobile remote wipe artifact detector
detect remote wipe commands during the loss window
- mobile find my disable artifact detector
detect Find My disable — common finder anti-tracking step
- forensic timeline builder
merge all device events into one timeline of finder activity
suggested options · order: asc
- case report generator
draft a report documenting what happened to the device while missing
suggested options · title: lost device — recovery triage
when you're done
export a run summary — a small JSON record of which steps you marked done, your notes, and a self-hash so the record can't be silently altered. it is your reproducibility note, not a per-tool receipt: each tool emits its own input→output receipt when you run it.