LogAnalysis
[logs] OS/X Thumb drive activity logger May 31 2008 08:01AM
ron dilley (ron dilley gmail com) (1 replies)
RE: [logs] OS/X Thumb drive activity logger Jun 02 2008 05:09PM
Paul Melson (pmelson gmail com) (1 replies)
> I could not find a tool that logs USB drive activity on OS/X so I put
together another 'poor mans solution' using syslog.

Parsing /var/log/system.log for 'fseventsd' should show you all USB drive
mount events:

$ grep fseventsd /var/log/system.log
Jun 2 13:01:15 mini2 fseventsd[39]: log dir: /Volumes/NO NAME/.fseventsd
getting new uuid: 6C2D7881-D24A-424B-A3C0-32C32A403047

PaulM

_______________________________________________
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis

[ reply ]
Re: [logs] OS/X Thumb drive activity logger Jun 02 2008 05:41PM
ron dilley (ron dilley gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus