ZEKASTRA case pack VP-10 - An Android phone, a threatening SMS and an alibi - SYNTHETIC TRAINING DATA
The people, phone numbers, messages and events are invented. The phone numbers are fictional and the coordinates are approximate public locations in Istanbul, used only to place the invented events.

Scenario (EN)
A woman in Besiktas received a threatening SMS from a number belonging to a man she knows. The man says he left his phone at a friend's house in Uskudar at about 21:30 that evening and was nowhere near Besiktas. His phone was seized the next morning. The prosecutor asks: was the message sent from this phone, when, where was the phone at the time, and does the record support the owner's account?

Senaryo (TR)
Beşiktaş'ta bir kadın, tanıdığı bir adama ait numaradan tehdit içerikli bir SMS aldı. Adam o akşam saat 21:30 sularında telefonunu Üsküdar'da bir arkadaşının evinde bıraktığını ve Beşiktaş'ın yakınında bile olmadığını söylüyor. Telefonu ertesi sabah el konuldu. Savcılık soruyor: ileti bu telefondan mı gönderildi, ne zaman, telefon o sırada neredeydi ve kayıtlar sahibinin anlatımını destekliyor mu?

Files
sms.csv                      SMS table. Epoch milliseconds, plus the tool's UTC rendering.
call-log.csv                 Call log from the tool's Turkish report. DEVICE LOCAL time, DD.MM.YYYY.
usage-events.csv             Screen, lock screen and app foreground events. Epoch milliseconds plus local rendering.
Timeline.json                On-device location history export. ISO 8601 with +03:00.
device-info.txt              Model, time zone, clock check, screen lock.
export-metadata.txt          Window, time basis and scope of every export. Read it first: four sources, three time notations.
acquisition-log.txt          Seizure, extraction, the owner's statement and the complaint, with the three addresses.
manifest.txt                 SHA-256 of every file above.

Rules
1. Verify every file against manifest.txt before you read anything else.
2. Convert every time to UTC and write the basis next to it. The call log is local time; the Timeline carries its offset.
3. A location fix is a circle, not a point: read accuracyMeters before you read the coordinates.
4. The phone is not the person. The records place and use a device; they do not say whose hand held it.