Linked Questions

0 votes
1 answer

How to find if a USB has been plugged in on a certain date? [duplicate]

Starting from this great script offered by Daniel Azuelos cd /Volumes/suspicious_USB /usr/bin/sudo find . -atime -21 -exec ls -dluT {} \; How is it possible to modify it in order to find if a USB ...
Doc Brown's user avatar
2 votes
0 answers

How can I know if a user plugged an external storage device into a Mac (such as an external hard drive) and moved/copied any data to and from it? [duplicate]

How can I know if a user plugged an external storage device (such as an external hard drive) and moved/copied any data to and from it? Is this recorded in any system logs?. Any article or resource ...
Antonio23249's user avatar
  • 1,795
1 vote
0 answers

How to find what file is deleted in macOS? [duplicate]

I have a question regarding macOS file operation. Is there a log file showing which file has been deleted on Mac recently?
Steven Liberto's user avatar
1 vote
3 answers

Did someone copy files from my Mac?

I was away from my MacBook Air (Yosemite) briefly and suspected that someone had copied files from my Mac. Here is what I can see from the system.log under console /var/log. Could some experts ...
user283539's user avatar
0 votes
1 answer

Detecting theft of data - folder / files transfered from MacBook to USB

I know this is similar to another question posted here a while ago: Did someone copy files from my Mac? but the problem is slightly different and the answers don't help in my case. I need to know ...
Diogenes's user avatar
1 vote
0 answers

Is there any software to track user activity on Mac OS Server?

I'm running a Mac server in my office with the following set up Mac Mini with macOS High Sierra 10.13.2 Apple Server 5.4 NAS unit On this system, we have a number of users connecting into it on a ...
KKBSE2016's user avatar
5 votes
1 answer

A standard method to trace and log which software creates and accesses files on my system?

Is there a way to continually trace/log which software is creating and accessing files on my system? I assume these log files would grow very large unless trimmed. I see a bunch of dot files and no ...
John's user avatar
  • 989
1 vote
1 answer

How can I view spawning processes or command lines of programs

I'm trying to identify what child processes a program spawns during execution. Ideally it will include things such as the command line being used to launch. Effectively, I'm looking for the OSX ...
Peleus's user avatar
  • 141
1 vote
1 answer

track internet usage app wise on the Mac

On the Mac, is there a way to track internet usage app-wise. Ideally I would want an app the ability to track monthly usage etc.
Himanshu P's user avatar
  • 3,402
1 vote
0 answers

Can I trace movement of files on macOS?

I would like to be able to collect data on file movement to filter it by time, type and/or size. Is there a procedure or third party app that will allow tracing of any file as it moves from a place of ...
GUSSS's user avatar
  • 11
0 votes
0 answers

Is there a way to see when an application was launched? [duplicate]

Is there a way to see when an application was launched? I need to restore some tabs that were open in my browser when I launched it several weeks ago (it is still running) and I want to look in the ...
d-b's user avatar
  • 3,276
1 vote
0 answers

Is there a log of all the apps I am running on my macOS?

I think being able to see what apps I use the most on a daily/weekly/monthly/yearly basis would be a good idea for macOS users. Are there such applications already available or a log file / ...
Kabir's user avatar
  • 111
3 votes
0 answers

Automatic removal of items from the trash after 30 days

Since Sierra, we can tell the Finder to remove items from the trash after 30 days. I have some questions about this: How can I tell how many days are left for a given file in the Trash? Where is ...
lhf's user avatar
  • 7,198
1 vote
1 answer

Is it possible to know if Mac system activity was done in this mac or in another mac? [closed]

Could I use the system logs to know if log-ins, log-outs, etc were done in this Mac?…how can I know the user didn’t put the storage into another similar Mac and operated the machine from that mac? ...
Antonio23249's user avatar
  • 1,795