Connected Devices

macOS records interactions with connected devices through multiple mechanisms. USB device connections are logged in Unified Logs, iOS device backups store complete device snapshots, and AirDrop transfers are tracked in system logs. These artifacts reveal which devices have been connected to the system, when connections occurred, and what data was transferred.

Categories

• USB Device History — USB device connections, timestamps, and device identifiers
• iOS Backups — iTunes/Finder iOS device backups with device metadata
• AirDrop — AirDrop file transfer history and discovery events