Skip to content
No results
  • Home
  • Apple Unified Log
    • What is the Apple Unified Log (AUL)?
    • How to investigate the Apple Unified Log
    • ALR Method
  • Posts
    • Artifacts
    • ALR Method
    • HowTo
  • How it started
  • Contact
  • Copyright
  • Privacy
  • Subscribe
Thesis Friday – Fridays are for artifacts
Fridays are for artifacts

Decode. Analyze. Understand.

  • Home
  • Apple Unified Log
    • What is the Apple Unified Log (AUL)?
    • How to investigate the Apple Unified Log
    • ALR Method
  • Posts
    • Artifacts
    • ALR Method
    • HowTo
  • How it started
  • Contact
  • Copyright
  • Privacy
Thesis Friday – Fridays are for artifacts
Fridays are for artifacts

Decode. Analyze. Understand.

  • Artifacts

USB and charger connections in the Apple Unified Log (iOS) – Thesis Friday #9

Key finding When a cable is connected, powerexperienced logs “plugin state changed to 1”. A RestrictedPerfMode entry in the same millisecond shows pluggedIn 1 and display 1, with every session flag at 0 (CarPlay, Siri, audio, NFC). That combination points…

  • Tim Korver
  • June 6, 2025

© 2026 Tim Korver — Thesis Friday. Blog content licensed under CC BY-NC-ND 4.0. Workshop and training material: all rights reserved. All log data originates from the author's own reference devices. No case data is used. This is a personal research publication and does not represent the position of any employer or working group. Copyright and Use · Contact.