Here, we're looking at the crash logs.
And I want to point out a few things to you.
The iPhone's connected.
This is mine.
It says Heather's iPhone.
Do you notice what I'm highlighted on?
It says proxy device and then another proxy device.
Proxy devices are additional items--
Apple Watches.
You have crash logs even for your watch.
So as we start going through here,
we can see different items that may be of interest.
Here, we can see Gmail.
And now, this is where this is important.
Do you see 2022-01-17.ips?
That is for the data that's contained in it
over here on the right hand side that's when I extracted it
or when I clicked export.
So the date modified is when the examiner connected that iPhone
and exported it.
The date of the directory is for the latest data it contains,
and it may go back even further.
Here, we have Identity Services.
That's interesting.
That's like ID status cache.
We have Instagram and different things that are running.