iCloud for iMessage...
 
Notifications
Clear all

iCloud for iMessage Artifact  

  RSS
TrevorLahey
(@trevorlahey)
New Member

Hello everyone, 

I was hoping that someone knew of an artifact that tells you if iCloud for iMessage is enabled or not on an iPhone. Would this artifact be apart of a standard logical extraction or would a full filesystem extraction be required? 

Thanks for any help!

This topic was modified 3 months ago by TrevorLahey
Quote
Posted : 30/07/2020 8:07 pm
lars
 lars
(@lars)
Junior Member

You want to look at:

private/var/mobile/Library/Preferences/com.apple.madrid.plist

which should be included in a logical extraction.

If the value for "CloudKitSyncingEnabled" is "True", then iCloud sync is on.

ReplyQuote
Posted : 05/08/2020 1:21 am
TrevorLahey
(@trevorlahey)
New Member

Thanks so much, lars. I tested this and did confirm it is apart of a logical extraction and that the CloudKitSyncingEnabled value is True when enabled. 

 

Best, 

ReplyQuote
Posted : 10/08/2020 10:47 pm
Share: