mandiant / mandiant/macos-UnifiedLogs
Potential log/logarchive format change in macOS 27
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 376
- Forks
- 43
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 8
Description
Something to track, it looks like the logarchive format may be changing in macOS 27 (Golden Gate). Per Apples recent beta release notes:
- https://developer.apple.com/documentation/macos-release-notes/macos-27-release-notes#Apple-Unified-Logging-System
- https://eclecticlight.co/2026/06/25/deprecations-and-removals-from-golden-gate/
Since macOS 26.2 (December 2025) can read the update logarchive format maybe/hopefully its small change
Will try to spin up macOS 27 beta instance to review
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked Apple macOS 27 release notes and the referenced Eclectic Light article, then review how the Rust parser handles logarchive data. Confirm whether macOS 27 changes the format and identify the compatibility work required; the issue is done when the impact is understood and any necessary parser changes are documented or implemented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- operating-systems
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100