{{ case_title or case_id }}

Executive Security & Android Forensic Report preparado {{ generated_at }}{% if examiner %} · Examiner: {{ examiner }}{% endif %}

{% for item in highlights %} {{ item }} {% endfor %}
{% for metric, value in report_metrics.items() %}

{{ metric.replace('_', ' ').title() }}

{{ value }}
{% endfor %} {% set total_count = artifacts | length if artifacts is sequence else 0 %}

Total Findings

{{ total_count }}
{% if case_summary %}

Case Workspace Summary

{% if case_summary.get('target_serials') %} {% endif %}
Total Artifacts {{ case_summary.get('total_artifact_count', 0) }} Selected Artifacts {{ case_summary.get('artifact_count', 0) }}
Active Jobs {{ case_summary.get('jobs', {}).get('total', 0) }} Runtime Sessions {{ case_summary.get('runtime_sessions', {}).get('total', 0) }}
Target Serials {{ case_summary.get('target_serials') | join(', ') }}
{% endif %} {% if evidence_summary %}

Evidence Summary

Inventory Items {{ evidence_summary.get('artifact_count', 0) }} Payload Data Rows {{ evidence_summary.get('artifact_payload_rows', 0) }}
{% if evidence_summary.get('top_categories') %}
Top Categories
{% for cat in evidence_summary.get('top_categories') %} {{ cat.name }} ({{ cat.count }}) {% endfor %}
{% endif %}
{% endif %}
{% if report_sections %}

Report Readiness & Details

{% for section in report_sections %} {% endfor %}
Section / Module Status Summary
{{ section.title }} {% set status_lower = (section.status or 'info') | lower %} {{ section.status or 'info' }} {{ section.summary }} {% if section.details %}
    {% for detail in section.details %}
  • {{ detail }}
    • {% endfor %}
{% endif %}
{% if report_preview %}
PDF backend status: {{ report_preview.get('pdf_backend_status', {}).get('preferred') or 'unavailable' }}
{% endif %}
{% endif %}
{% set modified_cnt = integrity.get('summary', {}).get('modified_count', 0) if integrity else 0 %} {% set missing_cnt = integrity.get('summary', {}).get('missing_count', 0) if integrity else 0 %} {% set is_tampered = (modified_cnt > 0 or missing_cnt > 0) %}
{% if is_tampered %}⚠️{% else %}🛡️{% endif %}

{% if is_tampered %}Forensic Evidence Tampered / Incomplete{% else %}Forensic Chain Integrity Verified{% endif %}

Status: {% if is_tampered %} ALERT: Evidence modifications or missing files detected! {% else %} ALL CLEAR: Integrity checks match original cryptographic signatures. {% endif %}

{% if integrity and integrity.get('advisory') %}

Advisory note: {{ integrity.get('advisory') }}

{% endif %}
{% if integrity %}

Verified Items

{{ integrity.get('summary', {}).get('verified_count', 0) }}

Modified Items

{{ modified_cnt }}

Missing Items

{{ missing_cnt }}

Unreadable / Unsupported

{{ integrity.get('summary', {}).get('unreadable_count', 0) + integrity.get('summary', {}).get('unsupported_count', 0) }}
{% endif %} {% if evidence_inventory %}

Evidence Inventory Log (first 100 entries)

{% for item in evidence_inventory[:100] %} {% endfor %}
Artifact ID Category Status Workspace Path
{{ item.get('artifact_id') }} {{ item.get('category') }} {% set status_class = 'info' %} {% if item.get('status') == 'verified' %}{% set status_class = 'low' %}{% endif %} {% if item.get('status') == 'modified' %}{% set status_class = 'high' %}{% endif %} {% if item.get('status') == 'missing' %}{% set status_class = 'critical' %}{% endif %} {{ item.get('status') }} {{ item.get('path') }}
{% endif %}

OWASP MASTG Standard Mappings

{% if mastg and mastg.get('mastg_ids') %}

This session aligned with the following OWASP Mobile Application Security Testing Guide controls:

{% for mid in mastg.get('mastg_ids') %} {{ mid }} {% endfor %}
{% if mastg.get('mappings') %}
{% for mapping in mastg.get('mappings') %} {% endfor %}
Finding ID Mapped MASTG Controls
{{ mapping.get('finding_id') }} {% for m in mapping.get('mastg') %} {{ m }} {% endfor %}
{% endif %} {% else %}

No explicit OWASP MASTG mappings are registered for this case.

{% endif %}

Top Security Findings & Artifact Preview

Click on any finding card to toggle details expansion.

{% if artifacts is sequence and artifacts is not string %} {% for a in artifacts[:100] %}
{% set sev = (a.get('severity') or 'info') | lower %} {% set badge_class = 'info' %} {% if sev == 'critical' %}{% set badge_class = 'critical' %}{% endif %} {% if sev == 'high' %}{% set badge_class = 'high' %}{% endif %} {% if sev == 'medium' %}{% set badge_class = 'medium' %}{% endif %} {% if sev == 'low' %}{% set badge_class = 'low' %}{% endif %} {{ sev }} {{ a.get('title') or a.get('id') or 'Untitled Finding' }}
▶
Finding ID: {{ a.get('id', 'n/a') }}
{% if a.get('details') %}
Detailed Evidence Payload:
{{ a.get('details') | tojson_pretty }}
{% endif %}
{% endfor %} {% if artifacts | length == 0 %}

No findings registered in this report context.

{% endif %} {% else %}

Artifacts finding sequence is empty or invalid.

{% endif %}
{% if operator_guidance %}

Forensic Operator Guidance

Actions and procedures suggested for execution on the target device:

    {% for item in operator_guidance %}
  • {{ item }}
    • {% endfor %}
{% endif %}

Simulated Live Diagnostics Console

Real-time hook tracing, booster sessions, and preflight security audits executed in this forensic window.

[+] LockKnife Forensic Engine successfully initialized.
[*] Target Case ID: {{ case_id }}
{% if case_summary and case_summary.get('target_serials') %}
[*] Hooking device serial: {{ case_summary.get('target_serials')[0] }}
{% endif %}
[*] Executing preflight security check...
[+] Memory safety check passed. Sandbox WASM active.
{% if is_tampered %}
[!] ALERT: Verification mismatch detected on database records.
[!] Modified: {{ modified_cnt }} file(s), Missing: {{ missing_cnt }} file(s).
{% else %}
[+] All file integrity audits matched recorded SHA-256 heads.
{% endif %}
[*] Ready to stream telemetry. Terminal logging is self-contained.