How to read log register

[Madquake]

Hi everyone,

I know yhis may sound a silly question, but does someone know how to read the log register?

I had to connect with my personal Mac at work for an important Skype call.

When I was joining the internet network I madfe a mistake choosing the internal WLAN instead of the guest connection.

A login window opened asking for the user name and password of my cmputer {the one I use to login the system and modify settings}.

I was in a hurry and I didn't think too much, absentmindedly prompting the info.

A window appeared with the message that the settings were successfully modified.


I connected to another network, but I'd like to know what settings I modified {and being "paranoid" if I gave them access to my computer or other crazy congettures}.


Do you know how I can check the "history" of what happened in terms of alteration of settings and permissions granted?


Thank you for your help... at least I use thisd as a moment to learn something new.

 

[Honza1]

Well, you can try to read logs in Console.app. You would need to be admin (so log in as your admin account) to see what was done under admin privileges - and even then, finding what they did would be like looking for needle in a haystack. There are time stamps so if you know exact time you have some chance, but this was never user friendly record of anything. You need to be expert.

No idea what happened, but the first thing I would look in is in System preferences in "Profiles". Companies install profiles which allow them to erase the computer and do other remote management things. I would be surprised if they could push this simply through by wlan connecting, though. I would expect this to be more involved.

Other they could install some software package to monitor the computer or run antivirus. I'd say look for some new application in Applications, but that may be challenge also...

It is more likely they just wanted to install certificate for wlan, which is benign.

 

[Madquake]

Well, you can try to read logs in Console.app. You would need to be admin (so log in as your admin account) to see what was done under admin privileges - and even then, finding what they did would be like looking for needle in a haystack. There are time stamps so if you know exact time you have some chance, but this was never user friendly record of anything. You need to be expert.

No idea what happened, but the first thing I would look in is in System preferences in "Profiles". Companies install profiles which allow them to erase the computer and do other remote management things. I would be surprised if they could push this simply through by wlan connecting, though. I would expect this to be more involved.

Other they could install some software package to monitor the computer or run antivirus. I'd say look for some new application in Applications, but that may be challenge also...

It is more likely they just wanted to install certificate for wlan, which is benign.

If I am not wrong I saw the icon of Airdrop in orange colour. Does it maybe help to understand what happened.

I saved the log... Is not really long as I turned on my computer for an urgent video call... I put my user and password (from the company) ... But they were wrong as that network is something that has it's own user and password... So I never really went online from that... After putting them a window opened asking login and password of my laptop... I inserted and another window came out saying that the settings were changed... The icon I remember (I was really in a hurry and got quite distracted) was the one of Airdrop but in orange...

 

[Madquake]

Is it possible that the WLAN {because that network is a WLAN} automatically asks you to activate Airdrop trough the
sharingdprocess? My computer is protected by password and when I have to alter settings it always asks me to insert user and password {to unlock the lock icon in user settings}.
Remembering the Airdrop icon {with the triangle that cuts the concentric circles} in orange color I thought this was just a request to activate Airdrop to make my computer visible through Airdrop.

The only problem is that I don't remember an orange color in that icon... usually is black or blue.
I wanted to check for what did I inseruser and password.
The timespan when that happened is from 13.15 to 13.25 so not too long.
I don't know what I have to search though.
I found in the console several logs... i was hoping for a "settings updated" message or something alike.

Seen I joined that network by mystake {as it has a similar name to to guest one} I didn't pay much attention, but that should have been an automatic action.

I just want to be sure that my personal data remain personal... that's it... if I permitted the use of a keylogger or something alike I'd like to revoke the permission and uninstall it...
I tried to find tutorial but... woahis really hard to find tutorials on how to read the console logs...