Iphone 10 iOS 12 Question
Is anyone aware of an artifact or log to validate when A phone may have been activated or usage started? Perhaps a log file or activated state file with time and date? I can look at general activity and have an idea however Im looking for something more definitive.
Jailbrake it and look at creation time of /var/log/* ?!
Ok that seems to be consistent with one of the dates I thought the usage may have started. I am using Var/logs/AppleSupport/general.log installed string. Var/log had the corecaptured.log which has the same creation date found in general.log. I have to look into it a bit more. Thank you for your insight.