This post by Italian non-profit Osservatorio Nessuno provides an introductive technical overview to forensic phone unlocking exploit kits used by governments and law enforcement, most notably Cellebrite.
This post provides an overview on how disk encryption works on Android, common attack vectors used by forensic tools to brute force or extract a device, their countermeasures against popular security features like automatic reboot in iOS and how you can protect yourself against such tools, including several mentions about GrapheneOS.
I opened a dialogue with the author recently to add some further information that might be of interest, given the article's nature I thought I would share it here too. Some of my suggestions have already been put in place. I will likely go on to recommend adding more countermeasures not mentioned in this article, such as the use of user profiles/private spaces for separated user data encryption.
Feel free to read it for yourself, I'd be glad to hear your thoughts: https://osservatorionessuno.org/blog/2026/05/demystifying-phone-unlocking-tools-a-technical-overview/