What does this tool do?:
The Sysdiagnose Log Toolkit allows users to quickly and easily obtain sysdiagnose logs and other syslogs from an iOS device. Sysdiagnose Log Toolkit includes the Hexordia Syslog Monitor which allows for real time monitoring of system logs.

What is a Sysdiagnose Log?:
The Sysdiagnose Log is an informational log which may be generated on iOS devices. This log is typically generated and then recovered from an iOS device.

Who is this tool for?:
This tool is for both Digital Forensics and Incident Response examiners.

How is this log useful for examiners?:
We can say: Sysdiagnose logs (and similar application crash logs) can provide device and application usage history along with a plethora of technical records. It is recommended to implement a parser after extracting the logs.

What information can we expect to find in the log?:
General system information, network connection information, diagnostic application information, and much more may appear in the log. For a full walkthrough of expected Sysdiagnose log artifacts, and how to parse them, check out our virtual live HMFA course or head over to our upcoming HEX-222 Sysdiagnose Log course.