![]() ![]() Which IP address has connected to my network when i was home ? You also want to know the global IP address you use when you remotely connect to your home network (favorite coffee shop IP, Workplace IP, Mobile Phone IP.) Router: Time & Ip address, Ask yourself those questions: Step up a level by not using a login/password Authentication.Įdit 1 : A successful attacker with enough privilege will delete some log entries ( if he knows what he is doing)Īlso, what specific info should I look for in the logs ?.Prohibition of passwords that match the format of calendar dates, license plate numbers, telephone numbers, or other common numbers prohibition of use of company name or an abbreviation.prohibition of words found in the user's personal information.prohibition of words found in a password.inclusion of one or more numerical digits inclusion of special characters, such as #, $.the use of both upper-case and lower-case letters (case sensitivity).Adopt a strong password policy with 12 characters as minimum length.For preventing it, You can add one of those 2 security layers: Typing last & last username in the command prompt might show some useful info.Ī VNC server can be bruteforced, look at this example using metasploit and vnc_login module. On your iMac, check the entry of those log files: On your cam server, check the entry of those log files (App/Utilities/Console): If you remember when the event occurred, and you know how to read a pcap file you can diagnose what happened. The iMac (thunderbolt Connection activities).You want to check the network logs of the following 3 endpoints: | The Internet +-+ ISP's router +-+ | Thunderbolt So your home network should be something like this: +-+ If they were able to access files, programs, etc.īasically, I want to assess if indeed I was "hacked" and if so, to what extent.If any of the above items, for how long until uncovered?.From mini-mac, successfully gain access to my iMac.What steps do I need to take to confirm or rule out, via logs and queries, that someone was able to: ![]() ![]() I tried to shut down everything ASAP, mac and mini mac, then restarted and disabled screen sharing and remote login on the regular mac. I also noticed the screenshare icon was connected and when I hovered over it, it was my mini-mac ip address. Yesterday, I was working on my regular mac when suddenly my screen moved to the "login screen". My router had port forwarding enabled for that mini-mac so that I can access cameras from outside. It is connected to my home wifi and also to my regular mac via thunderbolt connection. I had screen and file sharing enabled, so that I can control it from my regular iMac, since no mouse, keyboard and screen is connected to mini-mac. On my home network, I have a headless mini-mac that I use as a media, plex and security cameras server. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |