Airplane mode in the Apple Unified Log (iOS 26) – Thesis Friday #13
Key finding On iOS 26 beta 1, CoreTelephony logs isAirplaneMode = 1…
Fridays are for artifacts
Decode. Analyze. Understand.
Fridays are for artifacts
Decode. Analyze. Understand.
The Friday Files
Face ID context in the Apple Unified Log (iOS 26) – Thesis Friday #12
Key finding On iOS 26 beta the core Face ID entry, PearlCamFrameReceived,…
Apple Unified Log CLI cheatsheet (log command, PDF) – Thesis Friday #11
Key finding A downloadable cheatsheet (PDF) with the log commands I use…
Touch ID and Home button in the Apple Unified Log (iOS 12) – Thesis Friday #10
Key finding On an iPhone 6 with iOS 12.5.7, Touch ID leaves…
USB and charger connections in the Apple Unified Log (iOS) – Thesis Friday #9
Key finding When a cable is connected, powerexperienced logs “plugin state changed…
Volume button presses in the Apple Unified Log (iOS) – Thesis Friday #8
Key finding Each press of a volume button is logged twice. First…
Apple Unified Log vs sysdiagnose: retention compared – Thesis Friday #7
Key finding A logarchive from log collect covers far more than the…
Acquiring the Apple Unified Log with log collect (macOS) – Thesis Friday #6
Key finding sudo log collect –device –output <file>.logarchive on a Mac acquires…
How app launches appear in the Apple Unified Log (iOS) – Thesis Friday #5
Key finding Opening a native app from the home screen leaves a…
Sysdiagnose or Apple Unified Log: process flow (PDF) – Thesis Friday #4
Key finding This post holds a one-page flowchart (PDF, CC BY-SA 4.0)…
Opening the Phone app in the Apple Unified Log (iOS) – Thesis Friday #3
Key finding A tap on the Phone icon produces three SpringBoard entries…
Screen orientation in the Apple Unified Log (iOS) – Thesis Friday #2
Key finding Every change in screen orientation is logged by backboardd under…
Face ID in the Apple Unified Log (iOS 18) – Thesis Friday #1
Key finding A single kernel entry, PearlCamFrameReceived from AppleH13CameraInterface, records that the…