log - How to check whether someone viewed/copied a video? - Ask Ubuntu


is there way check if (a hacker had physical access machine) has accessed or copied file (a video) on system? need know.

using terminal, check when last time video file accessed, if later last time accessed it, there's chance has copied it. of course if you've accessed file since then, or can't remember when last accessed it, won't helpful. access, mean copy, play or move file.

in terminal, use command:

stat /path/to/video

you'll output in following format:

$ stat file   file: â?~fileâ?t   size: 435             blocks: 8          io block: 4096   regular file device: 801h/2049d      inode: 262181      links: 1 access: (0755/-rwxr-xr-x)  uid: (    0/    root)   gid: (    0/    root) access: 2016-09-12 10:30:01.186634836 +0100 modify: 2015-10-13 15:18:11.669085522 +0100 change: 2015-10-13 15:18:11.669085522 +0100  birth: -

the information after access: line tell when last accessed.

this method not foolproof, access time file can faked, or system time can changed duration of file access, reset correct time. depends on skill level of user trying copy video. may not have not have bothered if going blackmail anyway, there's no way of discerning information. it's difficult track file access without having installed ids (intrusion detection system) such snort or tripwire.


Comments

Post a Comment

Popular posts from this blog

download - Firefox cannot save files (most of the time), how to solve? - Super User

this not full duplicate of this question or this question , though base question same. however, questions have no answers. for on half year have problems downloading files firefox. when click on download link, download dialog opened asking me do, save or open it. immediately, there error/warning pop-up (twice, can see 1 @ first) ok button. looks this message : "c:\users\%user%\appdata\local\temp\wbbdv9k8.zip.part not saved because source file not read. try again later or contact server administrator." replace '%user%' name of user trying download. after closing pop-up, download dialog disappears , have minimize firefox , open again, see other pop-up. downloading exact same file internet explorer work, not desired. i tried solutions here . tried solutions here . tried disabling extensions. tried fixing permissions on temp folder. tried making files , folder in profile directory non-readonly. tried running firefox administrator. tried ...
Read more

windows - "-2146893807 NTE_NOT_FOUND" when repair certificate store - Super User

i try repair certificate store in windows 10 doing c:\windows\system32>certutil -store -user ‎330000019dba8d5dddb98062a900000000019d "personal" certutil: -store command failed: 0x80090011 (-2146893807 nte_not_found) certutil: object not found. i have double check mmc, certificate details serial number of certificate. still fail repair certificate store. can please help? i getting same error when trying export pfx. turns out had export c:\cert.pfx instead of cert.pfx (it trying export file cert store ( cert:\localmachine\my ).
Read more