One of the most useful artifacts when properly configured and maintained, are log files. All devices keep some sort of logs, even mobile devices.
macOS syslog. Since macOS Sierra (10.12, 2016) Apple has redesigned its log system. Unix logs were replaced (syslog, for example).
This document is devoted to AWS logs. Several examples are analysed and useful fields are marked.
Intro Directory events only 10.5-10.6. File events since 10.7. Each record is assigned a name which is constucted the following way: hex(last_event_id + 1).
Git is a version control tool. I am putting it in this section since it’s basically logging all that happens within the repo.
This is about … .
/var/log ð§ /etc/rsyslog.conf - see the log owners, what specific logs are logging and where the additional configurations are stored.