iCloud for iMessage Artifact
I was hoping that someone knew of an artifact that tells you if iCloud for iMessage is enabled or not on an iPhone. Would this artifact be apart of a standard logical extraction or would a full filesystem extraction be required?
Thanks for any help!
You want to look at:
which should be included in a logical extraction.
If the value for "CloudKitSyncingEnabled" is "True", then iCloud sync is on.
Thanks so much, lars. I tested this and did confirm it is apart of a logical extraction and that the CloudKitSyncingEnabled value is True when enabled.