For the longest time a big struggle with doing mobile application assessments on iOS has beenmonitoringapplications as they drop files to the file system. There weredefinitelyways to do this but they involved taking snapshots of the application directory with tools likemacrobber. This is less than adequate because some of these apps drop unencrypted files with sensitive data but later delete them as part of a functions cleanup. A realtime solution was needed.