iOS Stream Names
When reviewing Biome and KnowledgeC artifacts in iOS Forensics there are often references to stream names for events. There is a plist file that seems to provide a little more information about these stream names including descriptions and some precision and rate limit values. It can be found at: /System/Library/PrivateFrameworks/CoreDuet.framework/com.apple.coreduet.systemevents.plist The below table is taken … Read more