Key finding sudo log collect –device –output <file>.logarchive on a Mac acquires the Unified Log from a connected device. Treat that logarchive as your original, hash it and work only on copies. From a copy, export time-bounded slices with log…