It would appear that someone has snooped on my MBP. My external drive was simply unplugged (not unmounted), so I got errors about that. Is there any way that I can tell what else was done during that time (since I have a rough time range)? What I've tried: I have looked in Finder "All My Files" and sorted by "Date Last Opened". I didn't see anything there in the time range. In "Recent Items" I don't see any programs that I think wasn't me. I've looked in console (I see lots of errors about my external drive not being found, not sure what else I can look for). Any suggestions would be helpful. Thanks.