Powerlog archives can be useful when attempting to track malware on an iOS device. CurrentPowerlog.PLSQL contains dates and times that can be associated with applications running in the background, applications draining the battery and surviving if the user deletes the app. This file should be examined in every investigation. Even if malware isn�t a concern, this file tracks so many items that are logged without user knowledge. The data-retention time for each table may differ; iOS version and available space may determine how much is stored in this archive. For more information on this archive, refer to Sarah Edwards� presentation (https://for585.com/518).