I write about Apple Unified Log analysis and the reasoning behind it. If you have a question about an artifact, a correction to something I published, or a research idea, I would like to hear from you.
What I am glad to hear about
Questions about AUL artifacts and how to interpret them. Corrections, most of all. Reference research you have done that confirms or contradicts something I wrote. Ideas for collaboration on research or publication. Requests for teaching, workshops or speaking.
If I got something wrong, I would rather hear it from you than leave it standing.
What I cannot help with
I do not consult on active investigations and I do not analyse data from casework. Everything published on this site comes from my own reference devices, with logged actions and noted timestamps. Please do not send me material from a case.
Elsewhere