For the longest time a big struggle with doing mobile application assessments on iOS has been monitoring applications as they drop files to the file system. There were definitely ways to do this but they involved taking snapshots of the application directory with tools like macrobber. This is less than adequate because some of these apps drop unencrypted files with sensitive data but later delete them as part of a functions cleanup. A realtime solution was needed.