From 315317863e6271ca667222b58729a87ce39ab4d7 Mon Sep 17 00:00:00 2001 From: Nex Date: Fri, 3 Sep 2021 14:06:01 +0200 Subject: [PATCH] Fixed documentation --- docs/ios/records.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/ios/records.md b/docs/ios/records.md index 5692610..66a85fa 100644 --- a/docs/ios/records.md +++ b/docs/ios/records.md @@ -148,15 +148,15 @@ If indicators are provided through the command-line, they are checked against th --- -### `osanalyticsdaily.json` +### `os_analytics_ad_daily.json` !!! info "Availability" Backup: :material-check: Full filesystem dump: :material-check: -This JSON file is created by mvt-ios' `OSAnalyticsADDAILY` module. The module extracts records from a plist located *private/var/mobile/Library/Preferences/com.apple.osanalytics.addaily.plist*, which contains a history of data usage by processes running on the system. Besides the network statistics, these records are particularly important because they might show traces of malicious process executions and the relevant timeframe. +This JSON file is created by mvt-ios' `OSAnalyticsADDaily` module. The module extracts records from a plist located *private/var/mobile/Library/Preferences/com.apple.osanalytics.addaily.plist*, which contains a history of data usage by processes running on the system. Besides the network statistics, these records are particularly important because they might show traces of malicious process executions and the relevant timeframe. -If indicators are provided through the command-line, they are checked against the process names. Any matches are stored in *osanalyticsdaily_detected.json*. +If indicators are provided through the command-line, they are checked against the process names. Any matches are stored in *os_analytics_ad_daily_detected.json*. ---