{{ case_title or case_id }}

Technical Evidence Log & Forensic Audit preparado {{ generated_at }}{% if examiner %} · Examiner: {{ examiner }}{% endif %}

{% for item in highlights %} {{ item }} {% endfor %}
{% for metric, value in report_metrics.items() %}

{{ metric.replace('_', ' ').title() }}

{{ value }}
{% endfor %} {% set total_findings = artifacts | length if artifacts is sequence else 0 %}

Supplied Finding Rows

{{ total_findings }}
{% if case_summary %}

Case Workspace Summary

{% if case_summary.get('target_serials') %} {% endif %}
Total Artifacts {{ case_summary.get('total_artifact_count', 0) }} Selected Artifacts {{ case_summary.get('artifact_count', 0) }}
Active Jobs {{ case_summary.get('jobs', {}).get('total', 0) }} Runtime Sessions {{ case_summary.get('runtime_sessions', {}).get('total', 0) }}
Target Serials {{ case_summary.get('target_serials') | join(', ') }}
{% endif %} {% if evidence_summary %}

Evidence Summary

Inventory Items {{ evidence_summary.get('artifact_count', 0) }} Payload Data Rows {{ evidence_summary.get('artifact_payload_rows', 0) }}
{% if evidence_summary.get('top_categories') %}
Top Categories
{% for cat in evidence_summary.get('top_categories') %} {{ cat.name }} ({{ cat.count }}) {% endfor %}
{% endif %}
{% endif %}
{% if report_sections %}

Report Sections & Readiness Summary

{% for section in report_sections %} {% endfor %}
Section Title Status Summary Description
{{ section.title }} {% set status_lower = (section.status or 'info') | lower %} {{ section.status or 'info' }} {{ section.summary }} {% if section.details %}
    {% for detail in section.details %}
  • {{ detail }}
    • {% endfor %}
{% endif %}
{% if report_preview %}
PDF backend status: {{ report_preview.get('pdf_backend_status', {}).get('preferred') or 'unavailable' }}
{% endif %}
{% endif %}
{% set modified_cnt = integrity.get('summary', {}).get('modified_count', 0) if integrity else 0 %} {% set missing_cnt = integrity.get('summary', {}).get('missing_count', 0) if integrity else 0 %} {% set is_tampered = (modified_cnt > 0 or missing_cnt > 0) %}
{% if is_tampered %}⚠️{% else %}🛡️{% endif %}

{% if is_tampered %}Evidence Verification Warning{% else %}Forensic Cryptographic Integrity Verified{% endif %}

Advisory: {% if is_tampered %} ALERT: Mismatched artifact signatures! {% else %} Verified. LockKnife verified all hashes on files. {% endif %}

{% if integrity and integrity.get('advisory') %}

Advisory note: {{ integrity.get('advisory') }}

{% endif %}
{% if evidence_inventory %}

Evidence Inventory Log (first 100 entries)

{% for item in evidence_inventory[:100] %} {% endfor %}
Artifact ID Category Status Workspace Path
{{ item.get('artifact_id') }} {{ item.get('category') }} {% set status_class = 'info' %} {% if item.get('status') == 'verified' %}{% set status_class = 'low' %}{% endif %} {% if item.get('status') == 'modified' %}{% set status_class = 'high' %}{% endif %} {% if item.get('status') == 'missing' %}{% set status_class = 'critical' %}{% endif %} {{ item.get('status') }} {{ item.get('path') }}
{% endif %} {% if artifact_preview_rows %}

Artifact Preview (first 10 rows)

{% for row in artifact_preview_rows %} {% endfor %}
Row Data Preview
{{ loop.index }} 
{{ row | tojson_pretty }}
{% endif %}

OWASP MASTG Mappings

{% if mastg and mastg.get('mastg_ids') %}

The following mapping logs align case findings with the mobile standard:

{% for mid in mastg.get('mastg_ids') %} {{ mid }} {% endfor %}
{% if mastg.get('mappings') %}
{% for mapping in mastg.get('mappings') %} {% endfor %}
Finding ID Mapped MASTG Controls
{{ mapping.get('finding_id') }} {% for m in mapping.get('mastg') %} {{ m }} {% endfor %}
{% endif %} {% else %}

No OWASP MASTG references mapped for this forensic capture.

{% endif %}

Technical Findings (first 200 entries)

Click on any finding panel to expand its evidence payload.

{% if artifacts is sequence and artifacts is not string %} {% for a in artifacts[:200] %}
{% set sev = (a.get('severity') or 'info') | lower %} {% set badge_class = 'info' %} {% if sev == 'critical' %}{% set badge_class = 'critical' %}{% endif %} {% if sev == 'high' %}{% set badge_class = 'high' %}{% endif %} {% if sev == 'medium' %}{% set badge_class = 'medium' %}{% endif %} {% if sev == 'low' %}{% set badge_class = 'low' %}{% endif %} {{ sev }} {{ a.get('title') or a.get('id') or 'Untitled Finding' }}
▶
Finding ID: {{ a.get('id', 'n/a') }}
{% if a.get('details') %}
Detailed Evidence Payload:
{{ a.get('details') | tojson_pretty }}
{% endif %}
{% endfor %} {% if artifacts | length == 0 %}

No findings mapped.

{% endif %} {% else %}

Raw artifacts format is scalar or empty.

{% endif %}
{% if operator_guidance %}

Operator Guidance & Manual Verification

System-generated recommendations for subsequent active verification steps:

    {% for item in operator_guidance %}
  • {{ item }}
    • {% endfor %}
{% endif %}

Simulated Live Diagnostics Console

Real-time hook tracing, booster sessions, and preflight security audits executed in this forensic window.

[+] LockKnife Forensic Engine successfully initialized.
[*] Target Case ID: {{ case_id }}
{% if case_summary and case_summary.get('target_serials') %}
[*] Hooking device serial: {{ case_summary.get('target_serials')[0] }}
{% endif %}
[*] Executing preflight security check...
[+] Memory safety check passed. Sandbox WASM active.
{% if is_tampered %}
[!] ALERT: Verification mismatch detected on database records.
[!] Modified: {{ modified_cnt }} file(s), Missing: {{ missing_cnt }} file(s).
{% else %}
[+] All file integrity audits matched recorded SHA-256 heads.
{% endif %}
[*] Ready to stream telemetry. Terminal logging is self-contained.

Raw Artifact Evidence JSON

{{ artifacts | tojson_pretty }}