The Arsenal Reports: The rise of targeted surveillance in India

Reports by a digital forensics consulting company named Arsenal Consulting reveal that malware was used to surveil and plant evidence on the computers of two of the accused in the Bhima Koregaon case. In this post, we look at these reports closely to provide an informed basis for commentary on digital evidence, forensics, and ongoing conversations on the use of malware such as Pegasus.

This is a companion discussion topic for the original entry at

(Reposted from /r/India on Reddit.)

Your write-up is nice.

One nit-pik. You should clarify that under the law, the police is required to provide a checksum authenticated images of the seized disk data to the defendant. It is through the analysis of this authenticated image that Arsenal came up with its report. Thus, the contents of these disks are essentially undisputable.