What do you know about new Mac OS X Forensic Artifacts?

MacOS Sierra (10.12) introduced a new logging mechanism called Unified Logging. This mechanism is used to piercing 10, tvOS watchOS 3 and 10 as well.

The developers claim that unified logs will take place Apple, system logs, as well as the Syslog, which is the fact that rely on a fairly large extent for the log analysis on 10.11 and older systems. As of 10.12.1, these magazines still exist. You can get acquainted with the changes in the article: «New macOS Sierra (10.12) Forensic Artifacts – Introducing Unified Logging».

DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.