Hello,
a rookie question: is there a way to see/recognize attacks to the (my) nextcloud and see which files was stolen if there attack was successful?
Thank you and best regards!
You can enable the audit app:
If someone’s account is used to download files, you should be able to see what has been downloaded. However that only works if someone is on your system using Nextcloud and there are no bugs in Nextcloud itself or someone attacks other services and gains access to your system.
Monitoring your logfiles is a good way to keep an eye on your system, if you have external monitoring (traffic usage etc.) this can be helpful as well. However, if someone is already on your system and has full control, it’s often too late and the logs have already been cleaned.