communications-analysis

What problem does it solve?

This Skill solves the challenge of manually reviewing large volumes of iOS communication data from device acquisitions to identify relevant forensic evidence, anomalous activity, and potential security threats including social engineering lures, suspicious URLs, and unknown correspondents.

Core Features & Use Cases

• Multi-surface communication analysis: Supports built-in iOS communications (SMS/iMessage, call history, contacts, mail) plus common third-party messengers including Signal, WhatsApp, Telegram, and WeChat.
• Anomaly and threat detection: Flags high-risk patterns like smishing URLs, short-code spam, FaceTime-based exploit probes, and deleted but recoverable message records.
• Use case: For an incident involving suspected Pegasus spyware, use this Skill to reconstruct the subject's full communication graph, identify one-click lure messages, and extract durable, court-admissible evidence of targeted outreach.

Quick Start

Use the communications-analysis skill to review all communication data from the provided iOS acquisition to surface any suspicious URLs, unknown contacts, and deleted message records related to the incident window.