Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: FaceTime and iMessage user content history?

I allowed my Mac to be taken out of my possession for service - it was taken to a backroom twice, for quite some time, so that a more senior technical person could be consulted about it. Later I received emails welcoming me to iCloud and two emails acknowledging my sign-in to FaceTime and iMessage. I am not normally an iCloud user, nor would I ever carelessly or thoughtlessly join FaceTime or iMessage. So I'm fairly certain that my machine [identity] was hijacked for a short time. I have since changed my AppleID password and some other security controls. However I have no idea of what has been done using my identity and my AppleID. Is there a user log or history that a moderator or support person can look at to see what happened for a specific AppleID over the last couple of days? I don't want to sign-up to these services just to find out what has happened. About a day later I did go into iCloud to see if 2FA was switched on and found many iCloud services that were enabled so I don't know what has happened in my name. I suspect just disabling my iCloud access to these services does not disable the respective sign-ins. Does anyone know how I can find out what has occurred?

MacBook Pro with Retina display, macOS High Sierra (10.13), Safari 11.0

Posted on

Reply
Question marked as Solved
Answer:
Answer:

You are welcome. I don't know of any such log, but there may be one. Try contacting Apple Support to ask. Supposedly if you tell them your question is about your Apple ID, you won't be charged.


Apple Support Contact



Apple Support by e-mail or chat

Posted on

There’s more to the conversation

Read all replies

Page content loaded

Nov 11, 2017 4:33 PM in response to Eric Root In response to Eric Root

I didn't give either an AppleID or password verbally, however I needed to login one or more times for them to do their technical work and don't recall ever logging out. If you say there is no such log I guess that is the end of it. I suspect it is possible to track user activity for high-level forensic purposes with a court order and using Apple's IT systems administrators, website developers, etc. Although, we not talking about that level of investigation. In my case I'm not trying to prove guilt, I even don't care about the "who". I'm only interested in accessing the damage. Some websites provide a simple history of logon/logoff times and sometimes additional details like when passwords were changed and various main windows/sub-systems that were accessed. Such a history [log] even if not provided as a user facility is sometimes available to website support staff - I guess that is what I was hoping for. Thank you for you reply.

Nov 11, 2017 4:33 PM

Reply Helpful
Question marked as Solved

Nov 11, 2017 5:19 PM in response to DW_User In response to DW_User

You are welcome. I don't know of any such log, but there may be one. Try contacting Apple Support to ask. Supposedly if you tell them your question is about your Apple ID, you won't be charged.


Apple Support Contact



Apple Support by e-mail or chat

Nov 11, 2017 5:19 PM

Reply Helpful
User profile for user: DW_User

Question: FaceTime and iMessage user content history?