Bangkok Cybersecurity Device Forensics Assistance
Budget / Salary$3,000–5,000
TypeFreelance project
LocationRemote
Posted2 hours ago
I have several devices—Macs, iPhones, iPads, Windows laptops, and a few Android phones—that may have been compromised. My highest priorities are:
• ruling out sophisticated spyware such as Pegasus or any unknown monitoring apps
• uncovering hidden MDM profiles, unauthorized proxies, or other concealed configuration changes
• detecting any man-in-the-middle activity that could be altering network traffic or even changing AI-generated answers
Your first task will be to work with me remotely. I’ll share whatever live logs, configuration screenshots, or packet captures you specify. Once you have a clear action plan, I’d like you to come to Bangkok (or send a trusted local engineer) to validate findings in person, image the devices, and harden them on-site.
Deliverables
1. For each Apple, Windows, and Android device:
• a forensic image or encrypted backup that I can retain
• a concise report detailing indicators of compromise, network anomalies, and any remediation performed
2. A traffic-analysis summary, preferably sourced from tools such as Wireshark, Zeek, or similar, highlighting any MITM attempts.
3. Deployment of a small cloud-based AI/IDS stack—your choice of Elastic Stack, Wazuh, CrowdStrike Falcon, or another comparable platform—that will continuously log traffic, flag MITM patterns, and alert me when responses from chat-based AI services appear manipulated.
4. A brief hand-off session (recorded) so I know how to review logs, rotate keys, and keep the system updated.
Acceptance Criteria
• No residual spyware signatures on any device (verified by up-to-date YARA rules and vendor-specific scanners).
• All hidden MDM or unmanaged profiles removed or fully documented.
• Continuous monitoring in the cloud is demonstrably catching test MITM attempts.
• All deliverables supplied in encrypted archives with verified hashes.
If you bring experience with mobile forensics suites like Cellebrite, desktop tools like iMazing, and network platforms such as Splunk or Elastic, you’ll fit perfectly. I’m ready to start as soon as you can outline your approach and timeline.
• ruling out sophisticated spyware such as Pegasus or any unknown monitoring apps
• uncovering hidden MDM profiles, unauthorized proxies, or other concealed configuration changes
• detecting any man-in-the-middle activity that could be altering network traffic or even changing AI-generated answers
Your first task will be to work with me remotely. I’ll share whatever live logs, configuration screenshots, or packet captures you specify. Once you have a clear action plan, I’d like you to come to Bangkok (or send a trusted local engineer) to validate findings in person, image the devices, and harden them on-site.
Deliverables
1. For each Apple, Windows, and Android device:
• a forensic image or encrypted backup that I can retain
• a concise report detailing indicators of compromise, network anomalies, and any remediation performed
2. A traffic-analysis summary, preferably sourced from tools such as Wireshark, Zeek, or similar, highlighting any MITM attempts.
3. Deployment of a small cloud-based AI/IDS stack—your choice of Elastic Stack, Wazuh, CrowdStrike Falcon, or another comparable platform—that will continuously log traffic, flag MITM patterns, and alert me when responses from chat-based AI services appear manipulated.
4. A brief hand-off session (recorded) so I know how to review logs, rotate keys, and keep the system updated.
Acceptance Criteria
• No residual spyware signatures on any device (verified by up-to-date YARA rules and vendor-specific scanners).
• All hidden MDM or unmanaged profiles removed or fully documented.
• Continuous monitoring in the cloud is demonstrably catching test MITM attempts.
• All deliverables supplied in encrypted archives with verified hashes.
If you bring experience with mobile forensics suites like Cellebrite, desktop tools like iMazing, and network platforms such as Splunk or Elastic, you’ll fit perfectly. I’m ready to start as soon as you can outline your approach and timeline.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.