Usage stats-- this is huge, and we are really
going to focus on usage stats at the end of Section 2.
We are going to find it in our forensic acquisitions.
We're going to kind of leverage what the tools can do for us,
but we're going to leverage ALEAPP and Alexis's scripts
to manually look at usage stats.
So you can see here, it's telling us
we have a time range from 12/11/2020 at 1:34
to 12/12/2020 at 1:34--
so 24 hours, and it's the last 24 hours of events.
Now, this is where a lot of people
say, the last 24 hours, even if it wasn't used,
or the last 24 hours of usage.
It should be the last 24 hours of usage.
So here, you can see things like where services are starting,
stopping, going into the foreground, the background,
activity being resumed.
It's amazing what is tracked.
If you cannot get it through the acquisition,
you can get it for free.
Do this.