When you're looking at datausage.sqlite,
if that ZFIRSTTIMESTAMP and ZTIMESTAMP
are exactly the same, think about what this may mean.
We have a bundle, which is an app.
The first time stamp and time stamp are exactly the same.
This is a good indication that the app was downloaded,
installed, and then never used.
And that does happen.
I can tell you, I've downloaded apps for my children's sporting
events or other things that I've never logged
into after I downloaded it.
It was almost out of sight, out of mind.
Shopping applications, delivery applications.
But what you are getting here is almost evidence of execution.
So if you think of the phone tracking,
OK, this is the first time I was ever launched,
this is the last time I was launched.
That is helpful.
So you are able to get that through the bundle name.
You can see the ZPROCNAME.
We have a lot of information here.