Key finding An empty search result in the Apple Unified Log only counts as evidence if you have shown that the archive covers your time window, and covers it for the kind of line you searched for. The archive’s own…