Evidence Preservation Mode
AssessTechniques
A GrayKey feature intended to keep seized devices in a state suitable for later forensic access.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 7Hacker News·10/1/2026securityGrayKey Adds a Way to Bypass iPhone Inactivity Reboot
Magnet Forensics says it has developed a method to keep iPhones in a state that makes them easier for law enforcement to access, even after Apple's 72-hour inactivity reboot feature. The capability appears in a new GrayKey Preserve device and an Evidence Preservation Mode for GrayKey, both aimed at preserving access to seized phones before forensic unlocking.