

iOS Unified Logs: The Myth of 30 Days Retention - Analysis of TTLs and log stats Command
In this article, I explain how to use the log stats command to quickly learn more about a .logarchive and the unified logs it contains. I show how to read the main statistics using the command log stats, what TTL (Time To Live) really means, and why it’s so important for digital forensics. I also highlight a few inconsistencies in how Apple presents these statistics, and how to work around them.

Lionel Notari
il y a 1 jour21 min de lecture