Samsung Z Fold Security Forensics

My Samsung Z Fold shows clear red flags—system packages requesting excessive permissions, profiles I never installed, and the lingering suspicion that an illegal MDM or configuration profile opened the door to a MITM or even IMSI-catcher-style intrusion. I need a same-day deep-dive that proves, documents, and then eliminates any compromise so the device leaves your hands fully hardened.

Scope
• Forensically inspect firmware, certificates, logs (logcat, Knox, auditd) and any profile or enrollment traces.
• Detect and confirm hidden MDM agents, remote-management or MITM tooling, plus suspicious configuration profiles.
• Identify and remove every shady package, service, or permission set.
• Produce a concise report summarising findings, indicators of compromise, and the exact remediation steps taken.
• Re-flash or re-provision if necessary (Odin, ADB, Samsung firmware tools), then lock everything down—verified boot, up-to-date patches, and hardened settings—so no external party can manage or monitor the phone again.

Acceptance criteria
1. Written report (PDF or Markdown) detailing each finding, evidence path, and fix.
2. Clean system image with zero unauthorised certificates, profiles, or agents.
3. Verified proof—screenshots or video—showing security settings, patch level, and integrity checks after remediation.
4. All work completed within today’s date.

Invoice proving ownership is ready on request. Secure file transfer or live remote session can be arranged immediately.