A new tool for performing full analysis of metadata for an APFS volume is now available – on an early bird offer.
forensics
Did you know your Mac may keep a history of its activities going back for over 3 months? Here’s how to access it, and some surprising results.
Most of what we know about log files, their maintenance by logd, the role of diagnosticd, and the differences between Persist and Special log files.
The combination lets you browse tracev3 log files within a log archive, which MakeLogarchive can create from raw logs in /var/db.
How to access raw log files generated by Sierra, High Sierra, iOS, etc., and a convenient utility to turn them into logarchives.
Sierra’s logs have changed, and now contain full entries for around 20 days. There’s also a log log, which has statistical summaries. All useful information for diagnosis and forensics.
This new version improves control behaviours in the preferences sheet. Is it ready for final release now?
Adds the ability to export and import libraries of custom predicates, styles, and filters to property list files, independently of preferences – a leap forward.
Filters are here: Consolation can now apply simple text filters, or regular expressions (regex) to refine your log browsing.
Make your log browsing more colourful, and as a result far easier to read.
