how can i find out if my mac has been accessed
I suspect someone may secretly have tried to hack my mac, used it, and shut it back down - any way to tell when it was last used?
iMac (27-inch Mid 2011)
I suspect someone may secretly have tried to hack my mac, used it, and shut it back down - any way to tell when it was last used?
iMac (27-inch Mid 2011)
Open Console & check the sytem log, it should have Date & Time of startups.
In Applicaitons > Utilities you will find System Profiler. Launch it (or you can avoid getting to the Utilties folder by holding the Option/alt key then clicking on your Apple menu.)
In the "Contents" pane on the left edge of the window, expand the "Software" section and click on "Logs" to get a screen similar to this:
Highlight "system.log" as shown and, with a lot of scrolling, you can see when the computer was opened over the last couple of days. The log gets overwritten eventually to save room so, if you suspect the intrusion was a few weeks ago, the entry is probably not there.
if the logs don't go back enough - try the last command in Terminal
last -20 reboot
should show the last 20 times the mac was started up
how can i find out if my mac has been accessed