What tool did Clark utilize to check real-time activities of iOS applications in his investigation?

In the context of monitoring and investigating iOS applications, the tool most commonly used for checking real-time activities is known as the iOS Console. This tool allows users to view log messages generated by applications running on an iOS device in real-time. It provides a comprehensive view of events happening in the system and can be instrumental in identifying issues or gathering relevant data during an investigation.

While Syslog may serve a similar function in different environments, and logentries and App Insights can be useful in specific scenarios or platforms, they are not primarily designed for real-time monitoring of iOS applications specifically. The iOS Console is crafted to interface directly with iOS devices, ensuring that developers and incident handlers have the necessary tools to access logs, view errors, and troubleshoot applications effectively.