iOS is always “doing things,” both because of and regardless of user activity. Most of what happens on a device is logged somewhere in the background. Some of this activity is captured in files and databases that are preserved in a forensic extraction. But a lot of logging is volatile — unless we take deliberate […]