Pegasus-Grade Forensics Specialist

I have strong evidence that several of my devices—Pixel 11, Pixel 10, an iPhone, and two MacBooks—are running a Pegasus-class implant. Unknown device-management entries and configuration profiles keep re-appearing, and a Tempest-style MITM attack is even forcing my AI tools to return falsified answers. I can open each settings page for you in a live remote screen-share so you can look at every toggle, certificate, and profile in real time. Your task is to spot and document every anomaly: hidden MDM hooks, unsigned configuration profiles, clandestine root certificates, persistence daemons, network redirections, or obfuscated payloads. I also need deep parsing of raw system logs (logcat, ADB bugreport, iOS sysdiagnose, macOS unified logs) and packet captures to trace how the attacker maintains command-and-control. Deliverables • A step-by-step forensic report for each device, including indicator lists and timestamps • Screenshots or extracted log snippets that prove the compromise paths • A clear remediation plan I can follow immediately • Recommendations for hardening so this class of attack cannot re-establish If you already work with tools such as Wireshark, Burp Suite, Cellebrite, XRY, or custom Python-based parsers for Pegasus-style exploits, you should feel at home on this engagement. Confidentiality is paramount; I will sign any mutual NDA you require before we begin.