How can I know if a user plugged an external storage device (such as an external hard drive) and moved/copied any data to and from it? Is this recorded in any system logs?. Any article or resource explaining this?
Ask Different is a question and answer site for power users of Apple hardware and software. It only takes a minute to sign up.Sign up to join this community