How could you prevent usb logging though? I plugged in nothing but a charge cable and immediately unplugged it and there were like 100+ IOPort logs and kernel logs. 

 Booting to another OS would happen at the firmware/BIOS level, I don’t think it would create a macOS level event in the logs 

 But the laptop was on but closed & asleep, how would you shut down, boot into another OS & then return it to the previous state without logs? 

 Ya fair! I was only thinking USB logs in that specific instance, not thinking through the whole scenario 

 plz let me know how U resolve this Guy Swann!   t-y 4 thread & allthebest with this shit 

 already securing more backups... 

 Aren't newer macbooks hard drives natively encrypted so that the files would be encrypted on download? I also don't think TAILS can boot on Apple Silicon (yet) 

 I don’t think Tails would have access to the local filesystem 

 I'm not a good hacker  

 Tis what I do 😅 

 the data are encrypted 

 Recovery is a better way, you can even reset passwords, it’s integrated, no logs 

 Tails still does not support M-series chips. MacOS recommends to encrypt all data on the first setup.