I got an email yesterday about someone logging in to my account as me but in another state. This was not my login. I went to the access area and found some unknown device accessed my account. How can I find out what they were able to do. My main concern is access to my photos and if they were able to download it, etc.
Unless you’re using something like Trakt to monitor activity, you won’t see anything that isn’t in your Plex Media Server.*.log files (settings - Server - Troubleshooting - Download Logs)
Hi I’m a novice at looking at the logs. what should i be looking for to determine what they have seen? I am most worried about pictures I’ve backup from my phone.
What you’ll see is listed by media item number.
Converting that to actual path takes a bit of doing; specifically constructing the URL used.
IIRC, you can see the partial query in the log and also reconstruct the URL. It’s been a while since I reverse engineering the paths so would have to do some research