Real Time Crowdsource Crime Dashboard

Forensic Monitor's real time capture of unauthorized Apple account access of the founder's laptop, specifically through the injection of a profile-less Apple
Declarative Device Management (DDM) system and its use for crowdsourced stalking, organized assaults, data harvesting, screen sharing, and keyboard control.
1,363
Crowdsource Attacks
8,689
Screen Share Handshakes
0x4 AWDL (1,000 ft)
10,137
Tracker Contacts
0x10 Direct Link (33ft)
18,826
Total Unauthorized
Authentications
440
Cell Wiretap Events
03/27/2026
Earliest Event
09/24/2026
Latest Event

⚠ Swarm Detections — 3+ Unique MACs Within One Hour

8 devices 09/24/2026 12:25 39 events Hour 12:00
3 devices 09/24/2026 14:37 9 events Hour 14:00
6 devices 09/23/2026 00:08 36 events Hour 00:00
3 devices 09/23/2026 01:08 18 events Hour 01:00
12 devices 09/23/2026 16:14 48 events Hour 16:00
10 records  |  Page 1 of 1
Timestamp ▼ MAC ID Device Transport IDS Token Auth Owner SameAcct DirectLink BLE / AWDL Tier Services Called § 2511 PhoneCall (14) ▼ Event / Translation
08/16/2026
21:17:10
0A:6E:A2:C2:98:AA iPhone~ DirectLink BBkDRkFj YES YES YES YES T1 Identity — —
Resolved DeviceAuthTag: owner
Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold)
08/16/2026
21:17:08
0A:6E:A2:C2:98:AA iPhone~ DirectLink BBkDRkFj YES YES YES YES T1 Identity — —
Resolved DeviceAuthTag: owner
Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold)
08/16/2026
21:13:01
0A:6E:A2:C2:98:AA iPhone~ DirectLink BBkDRkFj YES YES YES YES T1 Identity — —
Resolved DeviceAuthTag: owner
Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold)