How could you prevent usb logging though? I plugged in nothing but a charge cable and immediately unplugged it and there were like 100+ IOPort logs and kernel logs.
Booting to another OS would happen at the firmware/BIOS level, I don’t think it would create a macOS level event in the logs
But the laptop was on but closed & asleep, how would you shut down, boot into another OS & then return it to the previous state without logs?
Ya fair! I was only thinking USB logs in that specific instance, not thinking through the whole scenario