drop an iOS netusage.sqlite or network usage plist · parse per-process network usage records · surface WiFi and cellular transfer volumes · reconstruct network activity timeline per app · detect anomalous upload patterns · runs locally
netusage.sqlite
drop netusage.sqlite or plist
/private/var/networkd/db/netusage.sqlite — sysdiagnose or full filesystem extraction
drop netusage.sqlite