Account Compromised, need to confirm attacker activity
I just received an email notification about a successful login to my box account from a country I have never traveled to. I didn't see the alert in my inbox for several hours, at which point I immediately changed my password.
I see the attacker login in the security tab, how can I confirm what they did in my account after logging in? How can access historical audit logs to confirm if they deleted or stole data?
Thank you
Post is closed for comments.
Comments
2 comments