In this article, I explain how to use the log stats command to quickly learn more about a .logarchive and the unified logs it contains. I show how to read the main statistics using the command log stats, what TTL (Time To Live) really means, and why it’s so important for digital forensics. I also highlight a few inconsistencies in how Apple presents these statistics, and how to work around them.

Disclaimer:   The information and analyses presented in this article are the result of personal research and testing. They are provided...

Disclaimer:   The information and analyses presented in this article are the result of personal research and testing. They are provided...

These iOS unified logs provide insights into device activity, user behavior, and events like orientation changes and screen backlighting.

In previous articles, we've examined user behavior through the investigation of unified logs (such as phone unlock events, touchscreen)

In the dynamic realm of iOS functionality, the Control Center emerges as a pivotal interface, offering users seamless access to critical dev

Disclaimer: tested in iOS 16 and 17. Before we begin... I want to wish you a wonderful year 2024! I also want to express my gratitude for...

In previous articles, we explored certain iOS unified logs related to the unlock process as well as the WhatsApp application. In this curren

Disclaimer: This article assumes that you are in possession of a Logs archive (.logarchive file). The information and analyses presented...