Apple System Log (ASL) files contain traces of the Tor Browser Bundle

A forensic analysis of the Tor Browser Bundle (version 2.3.25-6, 64-bit) on OS X 10.8 showed that Apple System Log (ASL) files contain traces of the Tor Browser Bundle:

  • /var/log/asl/2013.05.22.U0.G80.asl
  • /var/log/asl/2013.05.22.U501.asl

I have been not been able to open the following two files, but they may contain traces of the attached drive and the bundle as well:

  • /var/log/asl/StoreData
  • /var/log/asl/SweepStore