Join Us!

iCloud for iMessage...
 
Notifications
Clear all

iCloud for iMessage Artifact  

  RSS
TrevorLahey
(@trevorlahey)
New Member

Hello everyone, 

I was hoping that someone knew of an artifact that tells you if iCloud for iMessage is enabled or not on an iPhone. Would this artifact be apart of a standard logical extraction or would a full filesystem extraction be required? 

Thanks for any help!

This topic was modified 1 week ago by TrevorLahey
Quote
Posted : 30/07/2020 8:07 pm
lars
 lars
(@lars)
Junior Member

You want to look at:

private/var/mobile/Library/Preferences/com.apple.madrid.plist

which should be included in a logical extraction.

If the value for "CloudKitSyncingEnabled" is "True", then iCloud sync is on.

ReplyQuote
Posted : 05/08/2020 1:21 am
Share: