Someone used my mac

[ultimateceej]

I left my macbook pro with a group of friends to go to a doctors appointment today only to find out that someone had been using it. Is there any way to find out exactly what was done or opened? Sorry if this has been posted before.

[bartelby]

Under the Apple menu there's "Recent items"
That's show what apps or file have been used recently (Last 10 of each I think)

[iBookG4user]

Well you could analyze what programs are now open compared to when you left. Check the history of your web browser. Look at the applications folder to see if there are any new apps installed.

[ultimateceej]

Hmmm... thanks for the info. There was no new history from my web browser but Automator was open when I got back. Unfortunately, I've opened at least 10 files/apps since then so the recent items menu is too up-to-date!! Is there a log file somewhere that can show me what happened during that time?

[iBookG4user]

Hmmm... thanks for the info. There was no new history from my web browser but Automator was open when I got back. Unfortunately, I've opened at least 10 files/apps since then so the recent items menu is too up-to-date!! Is there a log file somewhere that can show me what happened during that time?

You could try system.log and console.log

[ultimateceej]

Thanks for the help!! :)

[iBookG4user]

Glad I could help :)

[polycat33]

Isn't there somewhere where you can change the number of recent items that show? I don't know if increasing the number after the fact would show that number or if it actually forgets after the number you had set at the time... or if the post above me is a better way to do it.

[ultimateceej]

Yeah, go to System Prefs > Appearance. I tried changing that too but it doesn't work. Every time i log out and come back, all three (Apps, Docs, Servers) are set back to the default 10. Any ideas??

[Nermal]

Hmm, it should definitely remember your settings there. Maybe it's worth a permission repair, but that might also blow away some history.

[ultimateceej]

Think i figured it out... I had to clear the recent items first and then change the numbers. Works fine now. :apple: :)

[AppleGuy2]

let this be a lesson...you should set your mac to require a password when it awakes from sleep, or if it is off, on startup...that will keep it from happening again :)

[ultimateceej]

let this be a lesson...you should set your mac to require a password when it awakes from sleep, or if it is off, on startup...that will keep it from happening again :)

Agreed.

[Carrot007]

let this be a lesson...you should set your mac to require a password when it awakes from sleep, or if it is off, on startup...that will keep it from happening again :)

Or maybe get some friends that you trust not to do silly things with your machine. I mean you left it with them, they had a look, what's the problem.