Apple System Log (ASL) files contain traces of the Tor Browser Bundle
A forensic analysis of the Tor Browser Bundle (version 2.3.25-6, 64-bit) on OS X 10.8 showed that Apple System Log (ASL) files contain traces of the Tor Browser Bundle:
- /var/log/asl/2013.05.22.U0.G80.asl
- /var/log/asl/2013.05.22.U501.asl
I have been not been able to open the following two files, but they may contain traces of the attached drive and the bundle as well:
- /var/log/asl/StoreData
- /var/log/asl/SweepStore